From 3265d69a6cfc9973ceb13bb2f374dd905fedcc32 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sebastian=20Kr=C3=BCger?= Date: Wed, 17 Jun 2026 10:09:37 +0200 Subject: [PATCH] fix(traefik): upgrade fail2ban plugin to v0.9.0 and fix config schema MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit v0.7.1 caused 403 on all routes. v0.9.0 renamed whitelist→allowlist, changed ip to a comma-separated string, and added enabled/statuscode fields. Co-Authored-By: Claude Sonnet 4.6 --- traefik/compose.yml | 2 +- traefik/dynamic/fail2ban.yaml | 10 ++++------ 2 files changed, 5 insertions(+), 7 deletions(-) diff --git a/traefik/compose.yml b/traefik/compose.yml index e35b060..33c346a 100644 --- a/traefik/compose.yml +++ b/traefik/compose.yml @@ -24,7 +24,7 @@ services: - "--certificatesresolvers.resolver.acme.email=${ACME_EMAIL}" - "--certificatesresolvers.resolver.acme.storage=/letsencrypt/acme.json" - "--experimental.plugins.fail2ban.moduleName=github.com/tomMoulard/fail2ban" - - "--experimental.plugins.fail2ban.version=v0.7.1" + - "--experimental.plugins.fail2ban.version=v0.9.0" ports: - "80:80" - "443:443" diff --git a/traefik/dynamic/fail2ban.yaml b/traefik/dynamic/fail2ban.yaml index 9a8b360..5b4d107 100644 --- a/traefik/dynamic/fail2ban.yaml +++ b/traefik/dynamic/fail2ban.yaml @@ -3,13 +3,11 @@ http: fail2ban: plugin: fail2ban: + allowlist: + ip: "127.0.0.1/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,::1" rules: bantime: "3h" findtime: "10m" maxretry: 5 - whitelist: - ip: - - "127.0.0.1/8" - - "10.0.0.0/8" - - "172.16.0.0/12" - - "192.168.0.0/16" + enabled: true + statuscode: "400,401,403-499"