45 lines
913 B
YAML
45 lines
913 B
YAML
|
---
|
|||
|
|
- name: 'fail2ban | apt update cache'
|
|||
|
|
apt:
|
|||
|
|
update_cache: yes
|
|||
|
|
cache_valid_time: 86400 #One day
|
|||
|
|
tags: ['fail2ban']
|
|||
|
|
|
|||
|
|
- name: 'fail2ban | install iptables packages'
|
|||
|
|
apt:
|
|||
|
|
name: "{{ item }}"
|
|||
|
|
update_cache: true
|
|||
|
|
state: present
|
|||
|
|
with_items:
|
|||
|
|
- fail2ban
|
|||
|
|
tags: ['fail2ban']
|
|||
|
|
|
|||
|
|
- name: 'fail2ban | delete default config'
|
|||
|
|
file:
|
|||
|
|
path: "/etc/fail2ban/jail.d/defaults-debian.conf"
|
|||
|
|
state: absent
|
|||
|
|
notify:
|
|||
|
|
- 'fail2ban | restart fail2ban'
|
|||
|
|
tags: ['fail2ban']
|
|||
|
|
|
|||
|
|
- name: 'fail2ban | configuring fail2ban'
|
|||
|
|
copy:
|
|||
|
|
src: defaults.conf
|
|||
|
|
dest: /etc/fail2ban/jail.d/defaults.conf
|
|||
|
|
mode: 0644
|
|||
|
|
force: yes
|
|||
|
|
notify:
|
|||
|
|
- 'fail2ban | restart fail2ban'
|
|||
|
|
tags: ['fail2ban']
|
|||
|
|
|
|||
|
|
- name: 'fail2ban | enable sshd jail'
|
|||
|
|
copy:
|
|||
|
|
src: sshd.conf
|
|||
|
|
dest: /etc/fail2ban/jail.d/sshd.conf
|
|||
|
|
mode: 0644
|
|||
|
|
force: yes
|
|||
|
|
notify:
|
|||
|
|
- 'fail2ban | restart fail2ban'
|
|||
|
|
tags: ['fail2ban']
|
|||
|
|
|