Fail2Ban

[chimpboy]

Hi all, I am stuck getting fail2ban working with Mealie.

I have Mealie in a docker container on unraid. Swag is also running. Fail2ban is working; I can effectively jail an IP that fails to log into other apps.

I can see that mealie.log includes a pretty straightforward entry for a failed login:

[ERROR|auth|L83] 2025-04-23T09:05:59: Incorrect username or password from 192.168.0.133

I can also see that the FAQ includes some info about fail2ban, but either I am using it incorrectly or it is wrong. (It's probably me!).

The relevant part of the mealie.conf file in fail2ban/filter.d is:

[Definition]
failregex = ^ERROR:\s+Incorrect username or password from <HOST>
datepattern = ^%%Y-%%m-%%d(T)%%H:%%M:%%S:

I have made a few different attempts at this but clearly I don't know what I am doing.

Can anyone assist me? Surely somebody has a working .conf file I could borrow?

[chimpboy]

Answered my own question, I think. mealie.log is now prompting fail2ban as it should. mealie.conf in fail2ban/filter.d is:

[Definition]
failregex = ^\[ERROR\|.*Incorrect username or password from <HOST>

No need for a datepattern, it seems.