# /etc/fail2ban/jail.local — TLO 2026-06-25
# Bannissement via UFW (firewall deja en place). xmlrpc volontairement EXCLU
# (coherence avec la pause #2 : risque de bannir IP OTGS si traduction auto WPML).

[DEFAULT]
banaction = ufw
bantime   = 1h
findtime  = 10m
maxretry  = 5
# 51.158.96.239 = IP du serveur (tests curl locaux) ; jamais bannir loopback/serveur
ignoreip  = 127.0.0.1/8 ::1 51.158.96.239

[sshd]
enabled  = true
backend  = systemd
maxretry = 4
bantime  = 1h

[wordpress-auth]
enabled  = true
port     = http,https
filter   = wordpress-auth
logpath  = /var/log/apache2/toulouse.access.log
backend  = auto
maxretry = 5
findtime = 5m
bantime  = 2h