Crowdsec or ban IP

[sacred bramble]

Hello

Is there a way to enable Crowdsec integration? Or to have Authentik "ban" an IP after few failed attempt from trying anymore?

TIA

[lunar tide]

I've banned IPs with Fail2Ban that automatically sets up a rule in Cloudflare...

However, you can block IP's in authentik with Repuration policy under "Customisation"...you would just set a threshold and if an IP exceeds that threshold authentik will deny login

[violet crypt]

Would you mind sharing an example? I'm trying to get my head around this but I can't seem to succeed

[low moon]

^^ are you able to provide an example for fail2ban? im struggling to find an example.

My fail2ban is using my nginx log, and prior to moving to authentik, i used the sonarr/radarr logs to ban failed attempts.

With authentik, how can i integrate 5 failed attempts result in a cloudflare ban?

[low moon]

https://github.com/goauthentik/authentik/issues/5352

found this, but not 100% sure how to set up the journald part

[lunar tide]

if you're referring to the commenter in the github issues stating they got it to work, they mean for you to add the logging portion to your docker compose server block

        driver: journald
        options:
          tag: "authentik"  # Optional: You can add a custom tag for the logs```

[low moon]

Ahhh ok. Is that comment the right way to go about it?

[low moon]

also im not sure how its possible with unraid

[lunar tide]

...not too sure about unraid either since I don't use it, however, that comment seems plausible...