ansible-roles/fail2ban/tasks/ip_whitelist.yml

---

- set_fact:
    fail2ban_ignore_ips: "{{ ['127.0.0.1/8'] | union(fail2ban_default_ignore_ips) | union(fail2ban_additional_ignore_ips) | unique }}"

- name: Update ignoreips lists
  ini_file:
    dest: /etc/fail2ban/jail.local
    section: "DEFAULT"
    option: "ignoreip"
    value: "{{ fail2ban_ignore_ips | join(' ') }}"
  notify: restart fail2ban
  tags:
    - fail2ban
Make ip whitelist tasks more flexible Now the list of whitelisted ip addresses can be updated simply by including the specific tasks in an external playbook without polluting our role list. This change takes effect for nginx, apache and fail2ban. 2018-10-29 21:53:46 +01:00			`---`
fail2ban: fix "ignoreip" update 2019-01-09 16:44:16 +01:00
			`- set_fact:`
			`fail2ban_ignore_ips: "{{ ['127.0.0.1/8'] \| union(fail2ban_default_ignore_ips) \| union(fail2ban_additional_ignore_ips) \| unique }}"`

Make ip whitelist tasks more flexible Now the list of whitelisted ip addresses can be updated simply by including the specific tasks in an external playbook without polluting our role list. This change takes effect for nginx, apache and fail2ban. 2018-10-29 21:53:46 +01:00			`- name: Update ignoreips lists`
			`ini_file:`
			`dest: /etc/fail2ban/jail.local`
fail2ban: fix "ignoreip" update 2019-01-09 16:44:16 +01:00			`section: "DEFAULT"`
			`option: "ignoreip"`
Make ip whitelist tasks more flexible Now the list of whitelisted ip addresses can be updated simply by including the specific tasks in an external playbook without polluting our role list. This change takes effect for nginx, apache and fail2ban. 2018-10-29 21:53:46 +01:00			`value: "{{ fail2ban_ignore_ips \| join(' ') }}"`
			`notify: restart fail2ban`
			`tags:`
			`- fail2ban`