[GH-ISSUE #2215] Will fail2ban be supported again? #1354

New issue

Open

opened 2026-03-02 11:56:44 +03:00 by kerem · 2 comments

kerem commented

2026-03-02 11:56:44 +03:00

Owner

Originally created by @leonbeon on GitHub (Dec 3, 2025).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/2215

In October of last year, adding failed login attempt to the log files was added to support fail2ban. In July, this feature was removed again (github.com/karakeep-app/karakeep@f8ae986692). Are there plans to add support again, or are there specific reasons why this was removed?

Originally created by @leonbeon on GitHub (Dec 3, 2025). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/2215 In October of last year, [adding failed login attempt to the log files](https://github.com/karakeep-app/karakeep/issues/477) was added to support fail2ban. In July, this feature was removed again (https://github.com/karakeep-app/karakeep/commit/f8ae986692f82efe8c1f3940907aab553e4f5a49). Are there plans to add support again, or are there specific reasons why this was removed?

kerem commented

2026-03-02 11:56:44 +03:00

Author

Owner

@BenRoe commented on GitHub (Dec 23, 2025):

Same question here. I wan't to use crowdsec.
Please add it, it's a mandatory feature, if Karakeep is reachable from the internet.

@BenRoe commented on GitHub (Dec 23, 2025): Same question here. I wan't to use crowdsec. Please add it, it's a mandatory feature, if Karakeep is reachable from the internet.

kerem commented

2026-03-02 11:56:45 +03:00

Author

Owner

@kintrupf commented on GitHub (Feb 16, 2026):

I'm really astonished that there are no log files available for this purpose!!! Any webpage that's open to the publish in any way MUST have something like that. How would I even know if someone tried to break into my server without such logs???

karakeep looks really good, but without this basic security feature it's hard to justify an installation...

@kintrupf commented on GitHub (Feb 16, 2026): I'm really astonished that there are no log files available for this purpose!!! Any webpage that's open to the publish in any way MUST have something like that. How would I even know if someone tried to break into my server without such logs??? karakeep looks really good, but without this basic security feature it's hard to justify an installation...

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/karakeep#1354

No description provided.

Rows
Columns