christianlempa-boilerplates/ansible/configuration/fail2ban/config-f2b-protect-sshd.yaml

---
- name: install fail2ban and configure sshd
  hosts: "{{ my_hosts | d([]) }}"
  become: true

  tasks:
    - name: install fail2ban
      ansible.builtin.apt:
        name:
          - fail2ban
        update_cache: true

    - name: copy fail2ban configfiles
      ansible.builtin.copy:
        src: configfiles/debian-sshd-default.conf
        dest: /etc/fail2ban/jail.d/debian-sshd-default.conf

    - name: restart fail2ban
      ansible.builtin.systemd_service:
        state: restarted
        daemon_reload: true
        name: fail2ban
initial deployment 2021-06-11 15:01:45 +02:00			`---`
ansiblesemaphore-udpate 2023-05-25 13:48:38 +02:00			`- name: install fail2ban and configure sshd`
fix: ensure the `hosts` definition is always defined Ensure that the `hosts` definition is always defined, defaulting to an empty set. Due to the lack of an Ansible inventory file this is most likely meant to be set as an Ansible extra variable [1]. We also rename the variable named `hosts` to `my_hosts` because `hosts` is a reserved name in Ansible. Reserved names in Ansible are for example all class variable names of plays, roles, blocks, and tasks [2], and `hosts` for example is used by plays [3]. [1] https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_variables.html#defining-variables-at-runtime [2] https://github.com/ansible/ansible/blob/v2.16.4/lib/ansible/vars/reserved.py#L39 [3] https://github.com/ansible/ansible/blob/v2.16.4/lib/ansible/playbook/play.py#L58 2024-02-23 12:19:48 +01:00			`hosts: "{{ my_hosts \| d([]) }}"`
fix: consistently use `true`/`false` as truthy values 2024-03-03 16:16:22 +01:00			`become: true`
fix: add and remove blank lines Add blank lines where it helps with readability (e.g., between each task) but also remove needless one. 2024-03-03 16:34:29 +01:00
initial deployment 2021-06-11 15:01:45 +02:00			`tasks:`
fix: fix YAML indentation issues 2024-03-03 16:10:27 +01:00			`- name: install fail2ban`
			`ansible.builtin.apt:`
			`name:`
			`- fail2ban`
fix: consistently use `true`/`false` as truthy values 2024-03-03 16:16:22 +01:00			`update_cache: true`
fix: add and remove blank lines Add blank lines where it helps with readability (e.g., between each task) but also remove needless one. 2024-03-03 16:34:29 +01:00
fix: fix YAML indentation issues 2024-03-03 16:10:27 +01:00			`- name: copy fail2ban configfiles`
			`ansible.builtin.copy:`
			`src: configfiles/debian-sshd-default.conf`
			`dest: /etc/fail2ban/jail.d/debian-sshd-default.conf`
fix: add and remove blank lines Add blank lines where it helps with readability (e.g., between each task) but also remove needless one. 2024-03-03 16:34:29 +01:00
fix: fix YAML indentation issues 2024-03-03 16:10:27 +01:00			`- name: restart fail2ban`
			`ansible.builtin.systemd_service:`
			`state: restarted`
fix: consistently use `true`/`false` as truthy values 2024-03-03 16:16:22 +01:00			`daemon_reload: true`
fix: fix YAML indentation issues 2024-03-03 16:10:27 +01:00			`name: fail2ban`