Je to na instalovane v /opt/ait-fail2ban/

V config.toml je potreba nastavit:
    ca_certs - cesta pro CA toho certifikatu
    client_bundle - cesta pro soubor kombinace client.cert.pem + client.key.pem udelana pomoci
        cat client.cert.pem client.key.pem > client_bundle.pem
    address - https adresa kde bezi ten server

Po pripade se necha nastavit jaky prikazy to bude poustet v ramci ban/unbanu v config.toml defaultne je:
  [fail2ban_commands]
  ban_command = { program = "/usr/bin/fail2ban-client", args = ["set", "dfail2ban", "banip", "{ip}"]}
  unban_command = { program = "/usr/bin/fail2ban-client", args = ["unban", "{ip}"]}

Od verze 0.7.2 toto jiz neni potreba:

v /etc/fail2ban/jail.conf jen doplni defaultni pravidla o nove napr:
action_ait_fail2ban = ait-fail2ban.py[]

A upravit tu vychozi action viz:

action_ = %(banaction)s[port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
          %(action_ait_fail2ban)s

Action je nainstalovany v ramci /etc/fail2ban/action.d/ait-fail2ban.py

dfail2ban jail je v ramci souboru:
* /etc/fail2ban/jail.d/dfail2ban.conf
* /etc/fail2ban/filter.d/dfail2ban.conf

Od verze 0.8.1:
pokud servisa nebude startovat kvuli configu tak je potreba pridat do /opt/ait-fail2ban/config.toml do sekce [fail2ban_commands] tento radek:
unban_all_command = { program = "/usr/bin/fail2ban-client", args = ["reload", "--unban", "dfail2ban"]}

Pokud je nastaveny jine jmeno jailu nez dfail2ban tak je potreba v ramci te command to zmenit.


