fail2ban.sh

#!/bin/bash

set -euxo pipefail

dnf install -y fail2ban
systemctl enable fail2ban

cat > /etc/fail2ban/jail.local<< EOF
[DEFAULT]
# Ban hosts for one hour:
bantime = 3600
findtime = 600
maxretry = 3

# Override /etc/fail2ban/jail.d/00-firewalld.conf:
banaction = iptables-multiport

[sshd]
enabled = true
EOF

systemctl restart fail2ban
sleep 2
fail2ban-client status sshd