feat: link pgbouncer and postgresql ports in fail2ban jails

Jose Ledesma · Jose Ledesma · commit 448df1a54803 · 2025-10-16T15:40:49.000+02:00
diff --git a/ansible/files/fail2ban_config/jail-pgbouncer.conf.j2 b/ansible/files/fail2ban_config/jail-pgbouncer.conf.j2
@@ -1,6 +1,6 @@
 [pgbouncer]
 enabled = true
-port    = 6543
+port    = 6543,5432 # ban both pgbouncer and postgresql
 protocol = tcp
 filter = pgbouncer
 backend = systemd[journalflags=1]
diff --git a/ansible/files/fail2ban_config/jail-postgresql.conf.j2 b/ansible/files/fail2ban_config/jail-postgresql.conf.j2
@@ -1,6 +1,6 @@
 [postgresql]
 enabled = true
-port    = 5432
+port    = 5432,6543 # ban both pgbouncer and postgresql
 protocol = tcp
 filter = postgresql
 logpath = /var/log/postgresql/auth-failures.csv
