diff options
| author | binary <me@rgoncalves.se> | 2020-06-30 19:24:22 +0200 |
|---|---|---|
| committer | binary <me@rgoncalves.se> | 2020-06-30 19:24:22 +0200 |
| commit | 68c01a04cd6268c1dee66678c258cd4c240d5bb1 (patch) | |
| tree | 1419eec22fa637159ba5e61ae1a6d9e11408a506 /roles/setup_fail2ban/tasks/main.yml | |
| download | infrastructure-68c01a04cd6268c1dee66678c258cd4c240d5bb1.tar.gz | |
Cleanup for public release
Diffstat (limited to 'roles/setup_fail2ban/tasks/main.yml')
| -rw-r--r-- | roles/setup_fail2ban/tasks/main.yml | 72 |
1 files changed, 72 insertions, 0 deletions
diff --git a/roles/setup_fail2ban/tasks/main.yml b/roles/setup_fail2ban/tasks/main.yml new file mode 100644 index 0000000..b0edb6e --- /dev/null +++ b/roles/setup_fail2ban/tasks/main.yml @@ -0,0 +1,72 @@ + +# =========================================================================== # +# __ ____ _ _____ __ +# _________ / /__ / __/___ _(_) /__ \ / /_ ____ _____ +# / ___/ __ \/ / _ \ / /_/ __ `/ / /__/ // __ \/ __ `/ __ \ +# / / / /_/ / / __/ / __/ /_/ / / // __// /_/ / /_/ / / / / +# /_/ \____/_/\___(_) /_/ \__,_/_/_//____/_.___/\__,_/_/ /_/ +# +# =========================================================================== # + +--- +- name: Check installation of fail2ban + package: + name: fail2ban + state: present + +- name: Check existence of fail2ban config file -- jail.local + stat: + path: /etc/fail2ban/jail.local + register: stat_result + +- name: Backing up ancient fail2ban config file -- jail.local.backup + shell: cp /etc/fail2ban/jail.local /etc/fail2ban/jail.local.backup + when: stat_result.stat.exists + +- name: Copy fail2ban :: jail.local + copy: + src: jail.local + dest: /etc/fail2ban/ + owner: root + group: root + mode: "0644" + +- name: Copy fail2ban :: path-defaults.conf + copy: + src: jail.local + dest: /etc/fail2ban/ + owner: root + group: root + mode: "0644" + +- name: Copy fail2ban :: path-defaults.conf + copy: + src: jail.local + dest: /etc/fail2ban/ + owner: root + group: root + mode: "0644" + +- name: Copy fail2ban :: jail-sshd.conf + copy: + src: jail-sshd.conf + dest: /etc/fail2ban/jail.d + owner: root + group: root + mode: "0644" + +- name: Copy fail2ban :: jail-lighttpd.conf + copy: + src: jail-lighttpd.conf + dest: /etc/fail2ban/jail.d + owner: root + group: root + mode: "0644" + when: inventory_hostname in groups["server-web"] + + +- name: Restart fail2ban service + systemd: + name: fail2ban + enabled: yes + state: restarted |