fail2ban support

confs/nginx.conf

@@ -1,7 +1,7 @@
 # /etc/nginx/nginx.conf
 
-# do not run as daemon
-daemon off;
+# run as daemon
+daemon on;
 
 # do NOT run as root
 user nginx;
@@ -61,8 +61,8 @@ http {
 	# enable/disable sending nginx version
 	server_tokens %SERVER_TOKENS%;
 
-	# display standard logs on stdout
-	access_log /dev/stdout;
+	# where to write logs
+	access_log /var/log/access.log;
 
 	# server config
 	include /etc/nginx/server.conf;

confs/server.conf

@@ -22,5 +22,6 @@ server {
 	%BLOCK_TOR_EXIT_NODE%
 	%COOKIE_FLAGS%
 	%ERRORS%
+	%USE_FAIL2BAN%
 	include /server-confs/*.conf;
 }