Files
stacks/traefik/dynamic/fail2ban.yaml
T
valknarandClaude Sonnet 4.6 8d33836714 fix(gitea): block scraper IP and add rate limiting
74.7.243.196 was crawling valknar/home SVG icon tree at 1.8 req/s.
- Denylist the IP in fail2ban dynamic config
- Add rate-limit@file middleware to Gitea's Traefik router to throttle
  future scrapers on public repos

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 10:27:56 +02:00

16 lines
376 B
YAML

http:
middlewares:
fail2ban:
plugin:
fail2ban:
allowlist:
ip: "127.0.0.1/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,::1"
denylist:
ip: "74.7.243.196"
rules:
bantime: "3h"
findtime: "10m"
maxretry: 5
enabled: true
statuscode: "400,401,403-499"