From 8e11cfacc3cdb0118f744969402baca653f2b990 Mon Sep 17 00:00:00 2001
From: "b.waal" <b.waal79@upcmail.nl>
Date: Tue, 26 Nov 2019 14:54:23 +0100
Subject: [PATCH] Created Fail2Ban config for Nextcloud

---
 config/fail2ban/nextcloud.conf | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 config/fail2ban/nextcloud.conf

diff --git a/config/fail2ban/nextcloud.conf b/config/fail2ban/nextcloud.conf
new file mode 100644
index 0000000..46235b1
--- /dev/null
+++ b/config/fail2ban/nextcloud.conf
@@ -0,0 +1,4 @@
+[Definition]
+failregex=^{"reqId":".<em>","remoteAddr":".</em>","app":"core","message":"Login failed: '.<em>' &#40;Remote IP: '<HOST>'&#41;","level":2,"time":".</em>"}$
+        ^{"reqId":".<em>","level":2,"time":".</em>","remoteAddr":".<em>","app":"core".</em>","message":"Login failed: '.<em>' &#40;Remote IP: '<HOST>'&#41;".</em>}$
+        ^.<em>\"remoteAddr\":\"<HOST>\".</em>Trusted domain error.*$
\ No newline at end of file