dwayne/gameops-host-dashboard
Watch
1
0
Fork
You've already forked gameops-host-dashboard
 0
Code Issues Pull requests Projects Releases 3 Packages Wiki Activity Actions

Document the ecosystem and add ingress fail2ban setup #3

Merged
dwayne merged 1 commit from codex/friend-installation-20260915 into main 2026-09-15 16:37:36 +01:00
Conversation 0 Commits 1 Files changed 8 +282 -1
dwayne commented 2026-09-15 16:16:22 +01:00
Owner
Copy link

Adds a reusable Caddy security-log snippet and guarded fail2ban jail installer for deployments with a separate HTTPS ingress. Exact hostname/login-path failures trigger nftables bans on TCP and UDP 80/443. The guide explains trustworthy client attribution, testing, recovery, CDN limitations and the need for native failure events for other applications.

Adds ecosystem guidance distinguishing this universal dashboard from game-specific dashboards and the blueprint generator. Version 0.8.0.

Validation: 16 Python tests including structured-log injection negatives, plus Bash syntax. The equivalent deployed ingress configuration passed a controlled failed-login ban/unban test, a forged-forwarding-header check, and IPv4/IPv6 ban persistence after a fail2ban restart.

Review branch only; merge before directing new users to the updated main-branch instructions. Credentials and private deployment state are excluded.

Adds a reusable Caddy security-log snippet and guarded fail2ban jail installer for deployments with a separate HTTPS ingress. Exact hostname/login-path failures trigger nftables bans on TCP and UDP 80/443. The guide explains trustworthy client attribution, testing, recovery, CDN limitations and the need for native failure events for other applications. Adds ecosystem guidance distinguishing this universal dashboard from game-specific dashboards and the blueprint generator. Version 0.8.0. Validation: 16 Python tests including structured-log injection negatives, plus Bash syntax. The equivalent deployed ingress configuration passed a controlled failed-login ban/unban test, a forged-forwarding-header check, and IPv4/IPv6 ban persistence after a fail2ban restart. Review branch only; merge before directing new users to the updated main-branch instructions. Credentials and private deployment state are excluded.
dwayne merged commit 7962531d54 into main 2026-09-15 16:37:36 +01:00
dwayne deleted branch codex/friend-installation-20260915 2026-09-17 19:49:15 +01:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
dwayne/gameops-host-dashboard!3
No description provided.