christianlempa-boilerplates/ansible/configuration/fail2ban/config-f2b-protect-sshd.yaml

---
- name: Install fail2ban and configure sshd
  hosts: "{{ my_hosts | d([]) }}"
  become: true

  tasks:
    - name: Install fail2ban
      ansible.builtin.apt:
        name:
          - fail2ban
        update_cache: true

    - name: Copy fail2ban config file
      ansible.builtin.copy:
        src: configfiles/debian-sshd-default.conf
        dest: /etc/fail2ban/jail.d/debian-sshd-default.conf
        mode: '0644'
        owner: root
        group: root

    - name: Restart fail2ban
      ansible.builtin.systemd_service:
        state: restarted
        daemon_reload: true
        name: fail2ban
initial deployment 2021-06-11 15:01:45 +02:00			`---`
fix: fix names which did not start with an uppercase letter 2024-03-03 16:54:47 +01:00			`- name: Install fail2ban and configure sshd`
fix: ensure the `hosts` definition is always defined Ensure that the `hosts` definition is always defined, defaulting to an empty set. Due to the lack of an Ansible inventory file this is most likely meant to be set as an Ansible extra variable [1]. We also rename the variable named `hosts` to `my_hosts` because `hosts` is a reserved name in Ansible. Reserved names in Ansible are for example all class variable names of plays, roles, blocks, and tasks [2], and `hosts` for example is used by plays [3]. [1] https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_variables.html#defining-variables-at-runtime [2] https://github.com/ansible/ansible/blob/v2.16.4/lib/ansible/vars/reserved.py#L39 [3] https://github.com/ansible/ansible/blob/v2.16.4/lib/ansible/playbook/play.py#L58 2024-02-23 12:19:48 +01:00			`hosts: "{{ my_hosts \| d([]) }}"`
fix: consistently use `true`/`false` as truthy values 2024-03-03 16:16:22 +01:00			`become: true`
fix: add and remove blank lines Add blank lines where it helps with readability (e.g., between each task) but also remove needless one. 2024-03-03 16:34:29 +01:00
initial deployment 2021-06-11 15:01:45 +02:00			`tasks:`
fix: fix names which did not start with an uppercase letter 2024-03-03 16:54:47 +01:00			`- name: Install fail2ban`
fix: fix YAML indentation issues 2024-03-03 16:10:27 +01:00			`ansible.builtin.apt:`
			`name:`
			`- fail2ban`
fix: consistently use `true`/`false` as truthy values 2024-03-03 16:16:22 +01:00			`update_cache: true`
fix: add and remove blank lines Add blank lines where it helps with readability (e.g., between each task) but also remove needless one. 2024-03-03 16:34:29 +01:00
fix: fix insecure file permission and ownership 2024-03-03 17:17:19 +01:00			`- name: Copy fail2ban config file`
fix: fix YAML indentation issues 2024-03-03 16:10:27 +01:00			`ansible.builtin.copy:`
			`src: configfiles/debian-sshd-default.conf`
			`dest: /etc/fail2ban/jail.d/debian-sshd-default.conf`
fix: fix insecure file permission and ownership 2024-03-03 17:17:19 +01:00			`mode: '0644'`
			`owner: root`
			`group: root`
fix: add and remove blank lines Add blank lines where it helps with readability (e.g., between each task) but also remove needless one. 2024-03-03 16:34:29 +01:00
fix: fix names which did not start with an uppercase letter 2024-03-03 16:54:47 +01:00			`- name: Restart fail2ban`
fix: fix YAML indentation issues 2024-03-03 16:10:27 +01:00			`ansible.builtin.systemd_service:`
			`state: restarted`
fix: consistently use `true`/`false` as truthy values 2024-03-03 16:16:22 +01:00			`daemon_reload: true`
fix: fix YAML indentation issues 2024-03-03 16:10:27 +01:00			`name: fail2ban`