From 88d8465cc3d53bd0d81d610a1d5249abb2b1e475 Mon Sep 17 00:00:00 2001
From: OniriCorpe <oniricorpe@disroot.org>
Date: Wed, 1 Nov 2023 04:32:32 +0100
Subject: [PATCH] add fail2ban

---
 scripts/upgrade | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/scripts/upgrade b/scripts/upgrade
index 7acd057..c61ebcb 100755
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -100,6 +100,14 @@ ynh_script_progression --message="Upgrading logrotate configuration..."
 # Use logrotate to manage app-specific logfile(s)
 ynh_use_logrotate --non-append
 
+#=================================================
+# SETUP FAIL2BAN
+#=================================================
+ynh_script_progression --message="Upgrading fail2ban configuration..."
+
+# Create a dedicated Fail2Ban config
+ynh_add_fail2ban_config --logpath="/var/log/${domain}-access.log" --failregex="<HOST> .* \"GET /api/.*\" 401" --max_retry=5
+
 #=================================================
 # SPECIFIC UPGRADE
 #=================================================