04.08.25

2025-08-04 18:24:30 +10:00
commit 9c9e8f09da
22 changed files with 533 additions and 0 deletions
--- a/roles/fail2ban/tasks/main.yml
+++ b/roles/fail2ban/tasks/main.yml
@@ -0,0 +1,26 @@
+- name: Install fail2ban
+  apt:
+    name: fail2ban
+    state: present
+    update_cache: true
+
+- name: Configure jail.local
+  template:
+    src: jail.local.j2
+    dest: /etc/fail2ban/jail.local
+    mode: 0644
+  notify: Restart fail2ban
+
+- name: Configure nginx filter
+  template:
+    src: nginx.conf.j2
+    dest: /etc/fail2ban/filter.d/nginx-http-auth.conf
+    mode: 0644
+  when: fail2ban_nginx_enabled
+
+- name: Ensure fail2ban is running
+  service:
+    name: fail2ban
+    state: started
+    enabled: true
+