init: wan-guard — fleet WAN IP → fail2ban whitelist sync

2026-08-09 10:55:18 +03:00
commit 43437002ca
6 changed files with 265 additions and 0 deletions
@@ -0,0 +1,26 @@
+{
+  "token": "REPLACE_WITH_STRONG_SECRET",
+
+  "static_ips": [
+    "127.0.0.1",
+    "::1",
+    "10.0.0.0/8",
+    "192.168.1.0/24"
+  ],
+
+  "targets": [
+    {
+      "name": "pbx-tempelhoff",
+      "type": "ssh",
+      "host": "pbx1.tempelhoff.ru",
+      "user": "root",
+      "ssh_key": "/root/.ssh/id_ed25519",
+      "whitelist_path": "/etc/fail2ban/jail.d/wan-guard.conf"
+    },
+    {
+      "name": "local-hub",
+      "type": "local",
+      "whitelist_path": "/etc/fail2ban/jail.d/wan-guard.conf"
+    }
+  ]
+}