THRESHOLD=30
BLOCK_TIME=360
DETECTION_TIME=5400
IPV6_SUBNET=128
IPV4_SUBNET=32
BACKEND="/usr/libexec/sshg-fw-nft-sets"
PID_FILE=/var/run/sshguard.pid
BLACKLIST_FILE=50:/var/lib/sshguard/enemies
WHITELIST_FILE=/etc/friends

{% if docker is defined %}
# docker is there - we also need to check container logs
# e.g. gitea runs openssh within
FILES="/var/log/maillog /var/log/secure /var/lib/docker/containers/*/*.log"
{% else %}
# assuming both auth and autpriv are sent to /var/log/secure
# which is not necessary the case with sysklogd's defaults on slackware
FILES="/var/log/maillog /var/log/secure"
{% endif %}