Added fail2ban, though not sure its configured correctly yet

docker/rootfs/fail2ban/paths-common.conf

@@ -0,0 +1,113 @@
+## Version 2022/08/06
+# Common
+#
+
+[INCLUDES]
+
+after  = paths-overrides.local
+
+[DEFAULT]
+
+default_backend = %(default/backend)s
+
+# Initial common values (to overwrite in path-<distribution>.conf)...
+# There is no sensible generic defaults for syslog log targets, thus
+# leaving them empty here (resp. set to mostly used variant) in order 
+# to avoid errors while parsing/interpolating configs.
+#
+# Note systemd-backend does not need the logpath at all.
+#
+var_log_path = /var/log
+logs_path = %(var_log_path)s
+
+syslog_local0 = %(logs_path)s/messages
+
+syslog_authpriv = %(logs_path)s/auth.log
+syslog_daemon  = %(syslog_local0)s
+syslog_ftp = %(syslog_local0)s
+syslog_mail =
+syslog_mail_warn =
+syslog_user = %(syslog_local0)s
+
+# Set the default syslog backend target to default_backend
+syslog_backend = %(default_backend)s
+
+# Default values for several jails:
+
+sshd_log = %(syslog_authpriv)s
+sshd_backend = %(default_backend)s
+
+dropbear_log = %(syslog_authpriv)s
+dropbear_backend = %(default_backend)s
+
+apache_error_log = %(logs_path)s/apache2/*error.log
+
+apache_access_log = %(logs_path)s/apache2/*access.log
+
+# from /etc/audit/auditd.conf
+auditd_log = %(logs_path)s/audit/audit.log
+
+exim_main_log = %(logs_path)s/exim/mainlog
+
+nginx_error_log = %(logs_path)s/nginx/*error.log
+
+nginx_access_log = %(logs_path)s/nginx/*access.log
+
+
+lighttpd_error_log = %(logs_path)s/lighttpd/error.log
+
+# http://www.hardened-php.net/suhosin/configuration.html#suhosin.log.syslog.facility
+# syslog_user is the default. Lighttpd also hooks errors into its log.
+
+suhosin_log = %(syslog_user)s
+              %(lighttpd_error_log)s
+
+# defaults to ftp or local2 if ftp doesn't exist
+proftpd_log = %(syslog_ftp)s
+proftpd_backend = %(default_backend)s
+
+# http://svnweb.freebsd.org/ports/head/ftp/proftpd/files/patch-src_proftpd.8.in?view=markup
+# defaults to ftp but can be overwritten.
+pureftpd_log = %(syslog_ftp)s
+pureftpd_backend = %(default_backend)s
+
+# ftp, daemon and then local7 are tried at configure time however it is overwriteable at configure time
+#
+wuftpd_log = %(syslog_ftp)s
+wuftpd_backend = %(default_backend)s
+
+# syslog_enable defaults to no. so it defaults to vsftpd_log_file setting of /var/log/vsftpd.log
+# No distro seems to set it to syslog by default
+# If syslog set it defaults to ftp facility if exists at compile time otherwise falls back to daemonlog.
+vsftpd_log = %(logs_path)s/vsftpd.log
+
+# Technically syslog_facility in main.cf can overwrite but no-one sane does this.
+postfix_log = %(syslog_mail_warn)s
+postfix_backend = %(default_backend)s
+
+dovecot_log = %(syslog_mail_warn)s
+dovecot_backend = %(default_backend)s
+
+# Seems to be set at compile time only to LOG_LOCAL0 (src/const.h) at Notice level
+solidpop3d_log = %(syslog_local0)s
+
+mysql_log = %(syslog_daemon)s
+mysql_backend = %(default_backend)s
+
+# jail.d/*.conf variables
+
+assp_mail_log               = /root/path/to/assp/logs/maillog.txt
+bitwarden_log               = /home/*/bwdata/logs/identity/Identity/log.txt
+counter_strike_log          = /opt/cstrike/logs/L[0-9]*.log
+domino_smtp_log             = /home/domino01/data/IBM_TECHNICAL_SUPPORT/console.log
+groupoffice_log             = /home/groupoffice/log/info.log
+kerio_security_log          = /opt/kerio/mailserver/store/logs/security.log
+mssql_error_log             = /var/opt/mssql/log/errorlog
+openhab_request_log         = /opt/openhab/logs/request.log
+oracleims_log               = /opt/sun/comms/messaging64/log/mail.log_current
+portsentry_log              = /var/lib/portsentry/portsentry.history
+qmail_log                   = /service/qmail/log/main/current
+roundcube_errors_log        = %(logs_path)s/roundcube/errors
+softethervpn_sec_log        = /usr/local/vpnserver/security_log/*/sec.log
+squirrelmail_access_log     = /var/lib/squirrelmail/prefs/squirrelmail_access_log
+znc_log                     = /var/lib/znc/moddata/adminlog/znc.log