WP_FAIL2BAN_SYSLOG_TAG_HOST
Put hostname in syslog tag.
Default setting: true
Deprecated since version 6.0.0.
Added in version 5.3.0.
Useful if your distro uses journald.
By default WPf2b includes the virtual host in the syslog tag so that the target can easily be identified. Unfortunately, journald cannot match the “syslog identifier” with a regex, so the next best option is to omit the host and match “wordpress”.
Warning
For future compatibility, make sure you’re not using the short tag (“wp”).
/*
* Use plain "wordpress" tag.
*/
define('WP_FAIL2BAN_SYSLOG_SHORT_TAG', false);
define('WP_FAIL2BAN_SYSLOG_TAG_HOST', false);
See also
Then in your jail.conf
you can do something like this:
[wordpress-hard]
enabled = true
filter = wordpress-hard.conf
journalmatch = SYSLOG_IDENTIFIER=wordpress
maxretry = 1
port = http, https