sftp-fail2ban

sftp-fail2ban

Docker-Anwendung from bmartino1's Repository

Übersicht

Easy to use SFTP (SSH File Transfer Protocol) server with OpenSSH and Fail2ban installed for extra hardening against brute force attacks. Forked from atmoz/sftp. Based on Debian Slim Image. *Shared Path is an example. You must replace the host path with the path to a folder to share AND change the user in the container path to the name of a user account configured in users.conf. See the GitHub page for more info: https://github.com/bmartino1/sftp2.

Laufzeit-Argumente

Netzwerk
bridge
Shell
bash
Privilegiert
false
Extra Params
--hostname sftp --cap-add=NET_ADMIN --cap-add=NET_RAW

Konfiguration der Vorlage

SSH PortPorttcp

Docker bridge network set SSH/SFTP port

Ziel
22
Standard
22
Wert
22
AdminDataPathrw

Default admin user's host folder/file access

Ziel
/home/admin/sftp
Standard
/mnt/user/
Wert
/mnt/user/
AppDataPathrw

Docker data - this is needed to change the user.conf for multiple user accounts

Ziel
/config
Standard
/mnt/user/appdata/sftp-fail2ban
Wert
/mnt/user/appdata/sftp-fail2ban
TimeZoneVariable
Ziel
TZ
Wert
America/Chicago
AUTO_UPDATEVariable

true Runs /stage/updateapps.sh if present custom Runs /config/updateapps.sh if present false or empty skips updates

Standard
true
Wert
true
LOG_STREAMSVariable

auth,fail2ban,whois (comma-separated list for Docker stdout) Tail log streams.

Standard
auth,fail2ban,whois
Wert
auth,fail2ban
ADMIN_PASSVariable

CHANGE ME! Set the admin password!

Wert
password
PUIDVariable

User root

Standard
99
Wert
0
PGIDVariable

User root

Standard
100
Wert
0
ADMIN_USERVariable
Standard
admin
Wert
admin
DEBUG_TESTINGVariable

Preflight checks (makes sure Fail2ban and sshd will work) (writes to /config/debug when true), false by default

Standard
false
Wert
true
TAIL_LOGSVariable

T/F enable Docker log showing tail logs. This doesn't stop them from writing to the log folder.

Standard
true
Wert
true
CLEAR_LOGSVariable

At container restart, truncate logs in the log folder. This will move old logs within the log folder; no logs are removed.

Standard
false
Wert
true
F2B_CONFIG_MODEVariable

How to handle /config Fail2ban files # ===== Fail2Ban config wiring ===== # How /etc/fail2ban is populated from /config/fail2ban: # - symlink (source of truth = /config) # - overlay (defaults + then /config over) # - noclobber (defaults + non-clobber copy from /config) # - replace (use /config only)

Standard
noclobber
Wert
symlink

Statistik herunterladen

1,154
Downloads insgesamt

Einzelheiten

Repository
bmmbmm01/sftp2:latest
Zuletzt aktualisiert2026-03-20
Erstmals gesehen2025-10-16

Führen Sie sftp-fail2ban auf Unraid aus.

sftp-fail2ban ist gelistet in Community Apps für Unraid OS. Erkunden Sie Unraid, um einen flexiblen Heimserver, ein NAS oder ein Heimlabor aufzubauen.