Revert to 73b5ae7 state

Author: RootShell-coder

docker/Dockerfile

@@ -13,10 +13,7 @@ RUN set -eux; \
     bind-tools \
     bind-dnssec-tools \
     openssl \
-    tzdata \
-    fail2ban \
-    iptables \
-    ip6tables; \
+    tzdata; \
   tar -C / -Jxpf /tmp/s6-overlay-noarch.tar.xz; \
   tar -C / -Jxpf /tmp/s6-overlay-x86_64.tar.xz; \
   rm -rf /tmp/* /var/cache/apk/* /etc/bind/*; \
@@ -25,8 +22,6 @@ RUN set -eux; \
 COPY ./bind /etc/bind
 COPY ./services.d /etc/services.d
 COPY ./cont-init.d /etc/cont-init.d
-COPY ./fail2ban/jail.local /etc/fail2ban/jail.local
-COPY ./fail2ban/filter.d /etc/fail2ban/filter.d
 
 RUN chmod +x /etc/services.d/*/run /etc/cont-init.d/*
 

docker/bind/logging.conf

@@ -1,19 +1,12 @@
 logging {
     channel default_log { syslog daemon; severity info; print-severity yes; print-category yes; print-time yes; };
     channel errors_log { syslog daemon; severity warning; print-severity yes; print-category yes; print-time yes; };
-    channel security_file {
-        file "/var/log/named/security.log" versions 3 size 10m;
-        severity dynamic;
-        print-severity yes;
-        print-category yes;
-        print-time yes;
-    };
 
     category default { default_log; };
     category config { default_log; };
-    category security { errors_log; security_file; };
-    category xfer-in { default_log; security_file; };
-    category xfer-out { default_log; security_file; };
+    category security { errors_log; };
+    category xfer-in { default_log; };
+    category xfer-out { default_log; };
     category update { default_log; };
     category dnssec { default_log; };
     category queries { default_log; };

docker/cont-init.d/01-named.sh

@@ -9,9 +9,7 @@ rndc-confgen -a -c /etc/bind/rndc.key
 
 log "Create directories"
 mkdir -p /var/cache/bind/keys
-mkdir -p /var/log/named
-touch /var/log/named/security.log
-chown -R named:named /var/cache/bind /etc/bind /var/log/named
+chown -R named:named /var/cache/bind /etc/bind
 
 log "Check config"
 named-checkconf /etc/bind/named.conf

docker/cont-init.d/02-fail2ban.sh

@@ -7,10 +7,6 @@ services:
       - "53:53/tcp"
     # - "953:953/tcp"
     restart: always
-    environment:
-      - FAIL2BAN_ENABLED=false
-    cap_add:
-      - NET_ADMIN
     volumes:
       - bind_keys:/var/cache/bind/keys
       - ./bind:/etc/bind