Fail2Ban configuration files for Domoticz behind NGINX Reverse Proxy

nginx-domoticz-jail.conf

# Fail2Ban jail configuration file for Domoticz behind NGINX Reverse Proxy.
# nginx-domoticz.conf
#
# The X-Forwarded-For IP isn't logged in the Domoticz log, and so any failed
# attempts will show the NGINX reverse proxy IP rather than the actual IP.
#
# Workaround is to look at all attempts and then set the maxretry number to 5.
# This doesn't protect against distributed attempts.
#
# Author: Brian Schmidt Pedersen
#
[nginx-domoticz]
enabled = true
port    = http,https
filter  = nginx-domoticz
logpath = %(nginx_access_log)s
maxretry= 5

nginx-domoticz.conf

# Fail2Ban filter configuration file for Domoticz behind NGINX Reverse Proxy.
# nginx-domoticz.conf
#
# The X-Forwarded-For IP isn't logged in the Domoticz log, and so any failed
# attempts will show the NGINX reverse proxy IP rather than the actual IP.
#
# Workaround is to check for the logincheck parameter, and ban if more than
# maxretry attempts, and then set the maxretry number to a higher value. Also
# checking all attempts that get a 401 (Unauthorized), as failed API attempts
# will show this. This doesn't protect against distributed attempts.
#
# Author: Brian Schmidt Pedersen
#
[Definition]

failregex = ^<HOST> -[^"]*"GET /json\.htm\?type=command&param=logincheck&[^"]*" 200
            ^<HOST> -[^"]*"GET /json\.htm\?[^"]*" 401

ignoreregex =