From 0c50c6cc277a1b729ab9062dfaaf033ab14ad089 Mon Sep 17 00:00:00 2001
From: Rajib Sharia <rajibsharia@gmail.com>
Date: Thu, 3 Apr 2025 11:39:47 +0800
Subject: [PATCH] Create paperless-ngx.conf

Filter for unsuccessful authentication attempts on paperless-ngx
---
 config/filter.d/paperless-ngx.conf | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 config/filter.d/paperless-ngx.conf

diff --git a/config/filter.d/paperless-ngx.conf b/config/filter.d/paperless-ngx.conf
new file mode 100644
index 00000000..e2d17db0
--- /dev/null
+++ b/config/filter.d/paperless-ngx.conf
@@ -0,0 +1,9 @@
+# Fail2Ban filter for unsuccessful paperless-ngx authentication attempts
+# Logged in /var/log/paperless.log
+
+# Author: LearningSpot
+
+[Definition]
+
+failregex = ^\s*(?:\[\]\s*)?\[INFO\] \[paperless\.auth\] Login failed for user `<F-USER>\S+</F-USER>` from (private )?IP `<ADDR>`\.$
+ignoreregex =