add hsts

wo/cli/templates/fail2ban.mustache

@@ -0,0 +1,24 @@
+[recidive]
+enabled = true
+
+[nginx-http-auth]
+enabled   = true
+
+[nginx-botsearch]
+enabled   = true
+
+[wo-wordpress]
+enabled = true
+filter = wo-wordpress
+action = iptables-multiport[name="wo-wordpress", port="http,https"]
+logpath = /var/log/nginx/*access.log
+maxretry = 5
+
+[nginx-forbidden]
+enabled = true
+filter = nginx-forbidden
+port = http,https
+logpath = /var/log/nginx/*error*.log
+findtime = 60
+bantime = 6000
+maxretry = 3