backup

Docker/compose.debug.yml

@@ -70,7 +70,7 @@ services:
     volumes:
       - ../backend/app:/app/app:z
       - ../fail2ban-master:/app/fail2ban-master:ro,z
-      - bangui-dev-data:/data
+      - ../data:/data
       - fail2ban-dev-run:/var/run/fail2ban:ro
       - ./fail2ban-dev-config:/config:rw
     ports:
@@ -82,7 +82,7 @@ services:
         "--reload", "--reload-dir", "/app/app"
       ]
     healthcheck:
-      test: ["CMD-SHELL", "python -c 'import urllib.request; urllib.request.urlopen(\"http://127.0.0.1:8000/api/health\", timeout=4)'"]
+      test: ["CMD-SHELL", "python -c 'import urllib.request; urllib.request.urlopen(\"http://127.0.0.1:8000/api/v1/health/live\", timeout=4)'"]
       interval: 15s
       timeout: 5s
       start_period: 45s

Docker/fail2ban-dev-config/fail2ban/filter.d/manual-Jail.conf

@@ -1,13 +0,0 @@
-# ──────────────────────────────────────────────────────────────
-#  BanGUI — Simulated authentication failure filter
-#
-#  Matches lines written by Docker/simulate_failed_logins.sh
-#  Format: <timestamp> bangui-auth: authentication failure from <HOST>
-#  Jail: manual-Jail
-# ──────────────────────────────────────────────────────────────
-
-[Definition]
-
-failregex = ^.* bangui-auth: authentication failure from <HOST>\s*$
-
-ignoreregex =

Docker/fail2ban-dev-config/fail2ban/jail.d/blocklist-import.conf

@@ -1,25 +1,10 @@
-# ──────────────────────────────────────────────────────────────
-#  BanGUI — Blocklist-import jail
-#
-#  Dedicated jail for IPs banned via the BanGUI blocklist import
-#  feature.  This is a manual-ban jail: it does not watch any log
-#  file.  All bans are injected programmatically via
-#    fail2ban-client set blocklist-import banip <ip>
-#  which the BanGUI backend uses through its fail2ban socket
-#  client.
-# ──────────────────────────────────────────────────────────────
-
 [blocklist-import]
 
-enabled    = true
-# No log-based detection — only manual banip commands are used.
+enabled    = false
 filter     =
 logpath    = /dev/null
 backend    = auto
 maxretry   = 1
 findtime   = 1d
-# Block imported IPs for 24 hours.
 bantime    = 86400
-
-# Never ban the Docker bridge network or localhost.
 ignoreip   = 127.0.0.0/8 ::1 172.16.0.0/12

Docker/fail2ban-dev-config/fail2ban/jail.d/manual-Jail.conf

@@ -1,19 +1,10 @@
-# ──────────────────────────────────────────────────────────────
-#  BanGUI — Simulated authentication failure jail
-#
-#  Watches Docker/logs/auth.log (mounted at /remotelogs/bangui)
-#  for lines produced by Docker/simulate_failed_logins.sh.
-# ──────────────────────────────────────────────────────────────
-
 [manual-Jail]
 
-enabled    = true
+enabled    = false
 filter     = manual-Jail
 logpath    = /remotelogs/bangui/auth.log
 backend    = polling
 maxretry   = 3
 findtime   = 120
 bantime    = 60
-
-# Never ban localhost, the Docker bridge network, or the host machine.
 ignoreip   = 127.0.0.0/8 ::1 172.16.0.0/12

Docker/fail2ban-dev-config/fail2ban/jail.local

@@ -1,6 +0,0 @@
-# Local overrides — not overwritten by the container init script.
-# Provides banaction so all jails can resolve %(action_)s interpolation.
-
-[DEFAULT]
-banaction = iptables-multiport
-banaction_allports = iptables-allports