a couple minor changes to Fail2Ban #870 fixed a couple variables, copied owncloud.conf fail2ban from my own owncloud 9 server for my own business. Though it is commented out

conf/fail2ban/jail.local

@@ -71,7 +71,7 @@ action   = iptables-allports[name=recidive]
 # enabled = true
 # filter = owncloud
 # action = sendmail-whois-lines[name=owncloud, dest="<USER>@<DOMAIN>.<TLD>,<USER2>@<DOMAIN2>.<TLD2>,fail2ban@blocklist.de", sender=fail2ban@box.<SERVER>.<TLD>, sendername="Fail2Ban"]
-# logpath = /home/user-data/owncloud/owncloud.log
+# logpath = STORAGE_ROOT/owncloud/owncloud.log
 # maxretry = 20
 # findtime = 300
 # bantime = 300
@@ -99,7 +99,7 @@ enabled  = true
 port     = http,https
 filter   = miab-owncloud
 # action = sendmail-whois-lines[name=miab-owncloud, dest="<USER>@<DOMAIN>.<TLD>,<USER2>@<DOMAIN2>.<TLD2>,fail2ban@blocklist.de", sender=fail2ban@box.<SERVER>.<TLD>, sendername="Fail2Ban"]
-logpath  = /home/user-data/owncloud/owncloud.log
+logpath  = STORAGE_ROOT/owncloud/owncloud.log
 maxretry = 20
 findtime = 30
 

conf/fail2ban/owncloud.conf

@@ -0,0 +1,8 @@
+[INCLUDES]
+before = common.conf
+
+[Definition]
+_daemon = owncloud
+
+failregex = {"reqId":".*","remoteAddr":".*","app":"core","message":"Login failed: '.*' \(Remote IP: '<HOST>'\)","level":2,"time":".*","method":".*}
+ignoreregex =

setup/system.sh

@@ -321,6 +321,7 @@ cp conf/fail2ban/miab-munin.conf /etc/fail2ban/filter.d/miab-munin.conf
 cp conf/fail2ban/miab-owncloud.conf /etc/fail2ban/filter.d/miab-owncloud.conf
 cp conf/fail2ban/miab-postfix-submission.conf /etc/fail2ban/filter.d/miab-postfix-submission.conf
 cp conf/fail2ban/miab-roundcube.conf /etc/fail2ban/filter.d/miab-roundcube.conf
+cp conf/fail2ban/owncloud.conf /etc/fail2ban/filter.d/owncloud.conf
 
 restart_service fail2ban