christianlempa-boilerplates/ansible/configuration/fail2ban/config-f2b-protect-sshd.yaml

---
- name: install fail2ban and configure sshd
  hosts: "{{ my_hosts | d([]) }}"
  become: yes
  tasks:
  - name: install fail2ban
    ansible.builtin.apt:
      name:
        - fail2ban
      update_cache: yes
  - name: copy fail2ban configfiles
    ansible.builtin.copy:
      src: configfiles/debian-sshd-default.conf
      dest: /etc/fail2ban/jail.d/debian-sshd-default.conf
  - name: restart fail2ban
    ansible.builtin.systemd_service:
      state: restarted
      daemon_reload: yes
      name: fail2ban
initial deployment 2021-06-11 15:01:45 +02:00			`---`
ansiblesemaphore-udpate 2023-05-25 13:48:38 +02:00			`- name: install fail2ban and configure sshd`
fix: ensure the `hosts` definition is always defined Ensure that the `hosts` definition is always defined, defaulting to an empty set. Due to the lack of an Ansible inventory file this is most likely meant to be set as an Ansible extra variable [1]. We also rename the variable named `hosts` to `my_hosts` because `hosts` is a reserved name in Ansible. Reserved names in Ansible are for example all class variable names of plays, roles, blocks, and tasks [2], and `hosts` for example is used by plays [3]. [1] https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_variables.html#defining-variables-at-runtime [2] https://github.com/ansible/ansible/blob/v2.16.4/lib/ansible/vars/reserved.py#L39 [3] https://github.com/ansible/ansible/blob/v2.16.4/lib/ansible/playbook/play.py#L58 2024-02-23 12:19:48 +01:00			`hosts: "{{ my_hosts \| d([]) }}"`
initial deployment 2021-06-11 15:01:45 +02:00			`become: yes`
			`tasks:`
			`- name: install fail2ban`
chore: consistently use Ansible FQCN in module calls In order to adhere to Ansible best practices, always use Fully Qualified Collection Names (FQCN) [1] when calling modules. Other than that, this commit doesn't apply any further changes except where needed as a module name has been updated. The module `ansible.builtin.systemd` has been renamed to `ansible.builtin.systemd_service` with `ansible.builtin.systemd` just being an alias [2] for reasons of backward compatibility. [1] https://docs.ansible.com/ansible/latest/tips_tricks/ansible_tips_tricks.html#use-fully-qualified-collection-names [2] https://docs.ansible.com/ansible/latest/collections/ansible/builtin/systemd_service_module.html#synopsis 2024-02-24 11:56:25 +01:00			`ansible.builtin.apt:`
initial deployment 2021-06-11 15:01:45 +02:00			`name:`
			`- fail2ban`
			`update_cache: yes`
			`- name: copy fail2ban configfiles`
chore: consistently use Ansible FQCN in module calls In order to adhere to Ansible best practices, always use Fully Qualified Collection Names (FQCN) [1] when calling modules. Other than that, this commit doesn't apply any further changes except where needed as a module name has been updated. The module `ansible.builtin.systemd` has been renamed to `ansible.builtin.systemd_service` with `ansible.builtin.systemd` just being an alias [2] for reasons of backward compatibility. [1] https://docs.ansible.com/ansible/latest/tips_tricks/ansible_tips_tricks.html#use-fully-qualified-collection-names [2] https://docs.ansible.com/ansible/latest/collections/ansible/builtin/systemd_service_module.html#synopsis 2024-02-24 11:56:25 +01:00			`ansible.builtin.copy:`
initial deployment 2021-06-11 15:01:45 +02:00			`src: configfiles/debian-sshd-default.conf`
			`dest: /etc/fail2ban/jail.d/debian-sshd-default.conf`
			`- name: restart fail2ban`
chore: consistently use Ansible FQCN in module calls In order to adhere to Ansible best practices, always use Fully Qualified Collection Names (FQCN) [1] when calling modules. Other than that, this commit doesn't apply any further changes except where needed as a module name has been updated. The module `ansible.builtin.systemd` has been renamed to `ansible.builtin.systemd_service` with `ansible.builtin.systemd` just being an alias [2] for reasons of backward compatibility. [1] https://docs.ansible.com/ansible/latest/tips_tricks/ansible_tips_tricks.html#use-fully-qualified-collection-names [2] https://docs.ansible.com/ansible/latest/collections/ansible/builtin/systemd_service_module.html#synopsis 2024-02-24 11:56:25 +01:00			`ansible.builtin.systemd_service:`
initial deployment 2021-06-11 15:01:45 +02:00			`state: restarted`
			`daemon_reload: yes`
fix: add final newline character to text files This makes text files compliant to POSIX which requires every line of a text file to end with a newline character [1][2]. [1] https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap03.html#tag_03_403 [2] https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap03.html#tag_03_206 2024-02-22 19:01:59 +01:00			`name: fail2ban`