From 4c53ed717174255dae8d1a40625a6f7de4a05e45 Mon Sep 17 00:00:00 2001
From: Ashiful Bhuiyan <ashiful@conquestace.com>
Date: Wed, 25 Jun 2025 06:28:46 -0400
Subject: [PATCH] Filters created by conquestace for services

---
 config/filter.d/gitea-auth.conf         | 3 +++
 config/filter.d/homeassistant-auth.conf | 3 +++
 config/filter.d/jellyfin-auth.conf      | 3 +++
 config/filter.d/kavita-auth.conf        | 3 +++
 config/filter.d/openwebui-auth.conf     | 3 +++
 5 files changed, 15 insertions(+)
 create mode 100644 config/filter.d/gitea-auth.conf
 create mode 100644 config/filter.d/homeassistant-auth.conf
 create mode 100644 config/filter.d/jellyfin-auth.conf
 create mode 100644 config/filter.d/kavita-auth.conf
 create mode 100644 config/filter.d/openwebui-auth.conf

diff --git a/config/filter.d/gitea-auth.conf b/config/filter.d/gitea-auth.conf
new file mode 100644
index 00000000..f7a048ca
--- /dev/null
+++ b/config/filter.d/gitea-auth.conf
@@ -0,0 +1,3 @@
+[Definition]
+failregex = .*Failed authentication attempt.*remote_addr=.*$
+ignoreregex =
diff --git a/config/filter.d/homeassistant-auth.conf b/config/filter.d/homeassistant-auth.conf
new file mode 100644
index 00000000..e76d26e1
--- /dev/null
+++ b/config/filter.d/homeassistant-auth.conf
@@ -0,0 +1,3 @@
+[Definition]
+failregex = Login attempt or request with invalid authentication from .*
+ignoreregex =
diff --git a/config/filter.d/jellyfin-auth.conf b/config/filter.d/jellyfin-auth.conf
new file mode 100644
index 00000000..49ceee62
--- /dev/null
+++ b/config/filter.d/jellyfin-auth.conf
@@ -0,0 +1,3 @@
+[Definition]
+failregex = ^\[\S+\] \[INF\] \[\d+\] Jellyfin\.Server\.Implementations\.Users\.UserManager: Authentication request for .+ has been denied \(IP: "<HOST>"\)\.
+ignoreregex =
diff --git a/config/filter.d/kavita-auth.conf b/config/filter.d/kavita-auth.conf
new file mode 100644
index 00000000..a4a3cda2
--- /dev/null
+++ b/config/filter.d/kavita-auth.conf
@@ -0,0 +1,3 @@
+[Definition]
+failregex = \[Warning\] API\.Controllers\.AccountController Attempted login by .+ failed due to unable to find account
+ignoreregex =
diff --git a/config/filter.d/openwebui-auth.conf b/config/filter.d/openwebui-auth.conf
new file mode 100644
index 00000000..7cdcd517
--- /dev/null
+++ b/config/filter.d/openwebui-auth.conf
@@ -0,0 +1,3 @@
+[Definition]
+failregex = ^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d+ \| INFO\s+\|\s+uvicorn\.protocols\.http\.httptools_impl:send:\d+ - <HOST>:\d+ - "POST /api/v1/auths/signin HTTP/1\.1" 400 - .*
+ignoreregex =