ansible-role-fail2ban/tasks/main.yml
2018-10-08 19:35:13 +02:00

27 lines
823 B
YAML

---
- name: Include vars for {{ ansible_os_family }}
include_vars: "{{ ansible_os_family }}.yml"
- name: Install packages for fail2ban
package: name="{{ fail2ban_packages }}" state=latest update_cache=yes
- name: Test if paths overrides file exist
stat: path=/etc/fail2ban/paths-overrides.local
register: pathsoverrides
- name: Touch the standard log file
file: path=/etc/fail2ban/paths-overrides.local state=touch owner=root group=root mode=0640
when:
- not pathsoverrides.stat.exists
- name: Install fail2ban configuration files
template: src="{{ item }}.j2" dest="/{{ item }}" owner=root group=root mode=0644
with_items:
- etc/fail2ban/jail.local
- etc/fail2ban/jail.d/02-services.conf
notify: Restart fail2ban
- name: Enable fail2ban services
service: name="fail2ban" enabled=yes