So I recently configured an application that uses WebSockets and I am using Apache proxy pass to pass on the application via domain.com/application
The problem is the application is very bare metal. It does come with a login screen, but I have gone a step further and implemented an htpasswd login via Apache that is located in the proxypass config.
(I feel like I am answering my question as i type, but I will re-word/re-ask)
<Location /application> AllowOverride AuthConfig AuthUserFile /home/[USERNAME]/.htpasswd AuthName "Authorization Required" AuthType Basic require user [USERNAME] ProxyPass wss://192.168.1.50:443/application ProxyPassReverse wss://192.168.1.50:443/application </Location>
Can I configure Fail2Ban to monitor the actual application login screen from the ProxyPass server [The Application can not install Fail2Ban]
--Workaround?? By implementing the htpasswd authorization page @ the proxyserver will fail2ban block based upon failed attempts to log in via the initial Apache Authentication prompt?