Externalize role

templates/etc/fail2ban/jail.d/02-services.conf.j2

@@ -0,0 +1,5 @@
+{% if fail2ban_ssh %}
+[sshd]
+enabled = true
+{% endif %}
+

templates/etc/fail2ban/jail.local.j2

@@ -0,0 +1,27 @@
+[DEFAULT]
+# "bantime" is the number of seconds that a host is banned.
+bantime  = {{ fail2ban_bantime }}
+
+# A host is banned if it has generated "maxretry" during the last "findtime"
+# seconds.
+findtime = {{ fail2ban_findtime }}
+
+# Destination email address used solely for the interpolations in
+# jail.{conf,local,d/*} configuration files.
+{% if fail2ban_email is defined %}
+destemail = {{ fail2ban_email }}
+{% else %}
+#destemail =
+{% endif %}
+
+# Sender email address used solely for some actions
+sender = root@localhost
+
+# Select mail mta instead of sendmail
+mta = mail
+
+# Choose default action.  To change, just override value of 'action' with the
+# interpolation to the chosen action shortcut (e.g.  action_mw, action_mwl, etc) in jail.local
+# globally (section [DEFAULT]) or per specific section
+action = %(action_mw)s
+