{"id":319,"date":"2022-05-27T16:51:00","date_gmt":"2022-05-27T13:51:00","guid":{"rendered":"https:\/\/tech.zeleneew.ru\/?p=319"},"modified":"2022-05-24T16:58:48","modified_gmt":"2022-05-24T13:58:48","slug":"fail2ban-%d0%b8-nextcloud","status":"publish","type":"post","link":"https:\/\/tech.zeleneew.ru\/?p=319","title":{"rendered":"Fail2Ban \u0438 Nextcloud"},"content":{"rendered":"\n<h3 class=\"wp-block-heading\">\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Fail2Ban:<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo zypper in fail2ban<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u043b\u043e\u0433-\u0444\u0430\u0439\u043b \u0434\u043b\u044f Nextcloud \u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u043c \u043f\u0440\u0430\u0432\u0430, \u0433\u0434\u0435 wwwrun &#8212; \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 WEB &#8212; \u0441\u0435\u0440\u0432\u0435\u0440:<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo touch \/var\/log\/nextcloud\/nextcloud.log\nsudo -u wwwrun chown wwwrun:www \/var\/log\/nextcloud\/nextcloud.log<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043b\u043e\u0433\u0430 \u0432 Nextcloud:<\/h3>\n\n\n\n<p>\u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0441\u043e\u043b\u044c:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo -u wwwrun php occ log:file --file \/var\/log\/nextcloud\/nextcloud.log --rotate-size 20M --enable\nsudo -u wwwrun php occ log:manage --level 2 --timezone Europe\/Moscow<\/pre>\n\n\n\n<p>\u043b\u0438\u0431\u043e \u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433 \u0444\u0430\u0439\u043b\u0430:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo vi \/srv\/www\/nextcloud\/config\/config.php\n  'logtimezone' => 'Europe\/Moscow',\n  'log_type' => 'file',\n  'logfile' => '\/var\/log\/nextcloud\/nextcloud.log',\n  'log_rotate_size' => 20971520,\n  'loglevel' => '2',\n<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0444\u0438\u043b\u044c\u0442\u0440 \u0434\u043b\u044f Fail2Ban:<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo vi \/etc\/fail2ban\/filter.d\/nextcloud.conf\n\n[INCLUDES]\nbefore = common.conf\n\n[Definition]\n_groupsre = (?:(?:,?\\s*\"\\w+\":(?:\"[^\"]+\"|\\w+))*)\nfailregex = ^\\{%(_groupsre)s,?\\s*\"remoteAddr\":\"&lt;HOST>\"%(_groupsre)s,?\\s*\"message\":\"Login failed:\ndatepattern = ,?\\s*\"time\"\\s*:\\s*\"%%Y-%%m-%%d[T ]%%H:%%M:%%S(%%z)?\"<\/pre>\n\n\n\n<p>\u0413\u0434\u0435 \u043c\u044b \u0438\u0449\u0435\u043c \u0432\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e \u0444\u0440\u0430\u0437\u0435 \u00abLogin failed\u00bb \u0438 \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u043c IP \u0430\u0434\u0440\u0435\u0441\u00a0 \u00ab&lt;HOST>\u00bb<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u043c \u0444\u0438\u043b\u044c\u0442\u0440:<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo vi \/etc\/fail2ban\/jail.local\n\n[DEFAULT]\nignoreip = \nenabled = true\nport = http,https \nfilter = nextcloud \nlogpath = \/var\/log\/nextcloud\/nextcloud.log\nfindtime = 600\nmaxretry = 3 bantime = 24h<\/pre>\n\n\n\n<p>\u0412 \u0441\u0435\u043a\u0446\u0438\u0438 DEFAULT \u043c\u044b \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u043d\u0430\u0448\u0438 IP \u0430\u0434\u0440\u0435\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f Fail2Ban (\u043f\u043e \u0441\u0443\u0442\u0438 \u0431\u0435\u043b\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a).<br>\u0412 \u0441\u0435\u043a\u0446\u0438\u0438 nextcloud \u043c\u044b \u0443\u043a\u0430\u0437\u0430\u043b\u0438:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>enabled = true #\u0444\u0438\u043b\u044c\u0442\u0440 \u0432\u043a\u043b\u044e\u0447\u0435\u043d<\/li><li>port = http,https #\u041f\u043e\u0440\u0442\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438<\/li><li>filter = nextcloud #\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0430 (filter.d\/nextcloud.conf)<\/li><li>logpath = \/var\/log\/nextcloud.log #\u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043b\u043e\u0433<\/li><li>findtime = 600 #\u0412 \u0441\u0435\u043a\u0443\u043d\u0434\u0430\u0445 \u2014 \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u0439<\/li><li>maxretry = 3 #\u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u043e\u0432 (\u043f\u043e\u0441\u043b\u0435 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, IP \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 \u0411\u0430\u043d)<\/li><li>bantime = 24h # \u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044f \u0432 \u0431\u0430\u043d\u0435, \u043c\u043e\u0436\u043d\u043e \u0432 \u043c\u0438\u043d\u0443\u0442\u0430\u0445 -m, \u0432 \u0447\u0430\u0441\u0430\u0445 -h, \u043b\u0438\u0431\u043e \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0430\u0445 \u2014 \u0431\u0435\u0437 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u0430<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a Fail2Ban:<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">sudo service fail2ban restart<\/pre>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Fail2Ban: sudo zypper in fail2ban \u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u043b\u043e\u0433-\u0444\u0430\u0439\u043b \u0434\u043b\u044f Nextcloud \u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u043c \u043f\u0440\u0430\u0432\u0430, \u0433\u0434\u0435 wwwrun &#8212; \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 WEB &#8212; \u0441\u0435\u0440\u0432\u0435\u0440: sudo touch \/var\/log\/nextcloud\/nextcloud.log sudo -u wwwrun chown wwwrun:www \/var\/log\/nextcloud\/nextcloud.log \u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043b\u043e\u0433\u0430 \u0432 Nextcloud: \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0441\u043e\u043b\u044c: sudo &hellip; <a href=\"https:\/\/tech.zeleneew.ru\/?p=319\">\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435 <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,8],"tags":[],"class_list":["post-319","post","type-post","status-publish","format-standard","hentry","category-opensuse","category-8"],"_links":{"self":[{"href":"https:\/\/tech.zeleneew.ru\/index.php?rest_route=\/wp\/v2\/posts\/319","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tech.zeleneew.ru\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tech.zeleneew.ru\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tech.zeleneew.ru\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/tech.zeleneew.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=319"}],"version-history":[{"count":3,"href":"https:\/\/tech.zeleneew.ru\/index.php?rest_route=\/wp\/v2\/posts\/319\/revisions"}],"predecessor-version":[{"id":322,"href":"https:\/\/tech.zeleneew.ru\/index.php?rest_route=\/wp\/v2\/posts\/319\/revisions\/322"}],"wp:attachment":[{"href":"https:\/\/tech.zeleneew.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=319"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tech.zeleneew.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=319"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tech.zeleneew.ru\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=319"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}