# ──────────────────────────────────────────────────────────────
#  BanGUI — Simulated HTTP access scan jail
#
#  Watches Docker/logs/access.log (mounted at /remotelogs/bangui)
#  for lines produced by Docker/simulate_accesses.sh.
# ──────────────────────────────────────────────────────────────

[bangui-access]

enabled    = true
filter     = bangui-access
logpath    = /remotelogs/bangui/access.log
backend    = polling
maxretry   = 3
findtime   = 120
bantime    = 60
banaction  = iptables-allports

# Never ban localhost, the Docker bridge network, or the host machine.
ignoreip   = 127.0.0.0/8 ::1 172.16.0.0/12