Commit 7d4490c9db3c

Vincent Demeester <vincent@sbr.pm>
2026-05-21 11:01:50
fix(carthage): exclude media services from fail2ban flood filter
Added navidrome, immich, jellyfin, audiobookshelf and their aliases to caddy-flood ignoreregex. These authenticated services with their own rate limiting were triggering bans during normal browsing.
main
1 parent 4e0ad46
Changed files (1)
systems
carthage
extra.nix
systems/carthage/extra.nix
@@ -194,6 +194,13 @@ in
       ignoreregex = ^.*"remote_ip":"10\.100\.0\..*$
                     ^.*"host":"ntfy\.sbr\.pm".*$
                     ^.*"host":"git\.sbr\.pm".*$
+                    ^.*"host":"music\.sbr\.pm".*$
+                    ^.*"host":"navidrome\.sbr\.pm".*$
+                    ^.*"host":"immich\.sbr\.pm".*$
+                    ^.*"host":"photos\.sbr\.pm".*$
+                    ^.*"host":"audiobookshelf\.sbr\.pm".*$
+                    ^.*"host":"podcasts\.sbr\.pm".*$
+                    ^.*"host":"jellyfin\.sbr\.pm".*$
       datepattern = "ts":{EPOCH}
     '';
   };