# =============================================================================
# Web GUI / WebRTC webphone login brute-force protection.
# Installed into /etc/fail2ban/jail.d/ by `php artisan pbx:deploy`.
#
# Watches the Laravel auth-failure log (real failed logins + lockouts only),
# not the web-server access log, so successful logins are never banned.
# Inherits ignoreip and other defaults from jail.local [DEFAULT].
# =============================================================================
[pbx-weblogin]
enabled   = true
port      = 80,443
filter    = pbx-weblogin
logpath   = /var/www/html/storage/logs/auth-failures.log
banaction = nftables-multiport
backend   = polling
maxretry  = 5
findtime  = 600
bantime   = 3600