---
- name: Include vars for {{ ansible_os_family }}
  include_vars: "{{ ansible_os_family }}_{{ ansible_distribution_major_version }}.yml"

- name: Install packages for fail2ban
  package:
    name: "{{ fail2ban_packages }}"
    state: present
    update_cache: yes

- name: Test if paths overrides file exist
  stat:
    path: /etc/fail2ban/paths-overrides.local
  register: pathsoverrides

- name: Touch the standard local file
  file:
    path: /etc/fail2ban/paths-overrides.local
    state: touch
    owner: root
    group: root
    mode: 0640
  when:
    - not pathsoverrides.stat.exists

- name: Install fail2ban configuration files
  template:
    src: "{{ item }}.j2"
    dest: "/{{ item }}"
    owner: root
    group: root
    mode: 0644
  with_items:
    - etc/fail2ban/jail.local
    - etc/fail2ban/jail.d/02-services.conf
  notify: Restart fail2ban

- name: Enable fail2ban services
  service:
    name: "fail2ban"
    enabled: yes