evolix
/
ansible-roles
17
2
Fork 2
Code Issues 61 Pull Requests 19 Releases 29 Wiki Activity

fail2ban: add variable fail2ban_sshd_port to configure sshd port
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2614|6|2608|3|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/311//ansiblelint">Evolix » ansible-roles » unstable #311</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details

This commit is contained in:
Ludovic Poujol 2023-07-31 11:50:36 +02:00
parent 7e193e4916
commit 16bba8b469
3 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGELOG.md
View File

@ -18,6 +18,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
* dovecot: fix old_stats plugin for Dovecot 2.3.
* evolinux: Install HPE Agentless Management Service (amsd)
* fail2ban: add default variable fail2ban_dbpurgeage_default
* fail2ban: add variable fail2ban_sshd_port to configure sshd port
* nagios-nrpe: add a NRPE check-local command with completion.
* policy_pam: New role allowing to manage password policy with pam_pwquality & pam_pwhistory
* userlogrotate: rotate also php.log.

1
fail2ban/defaults/main.yml
View File

@ -23,6 +23,7 @@ fail2ban_default_findtime: 10m
fail2ban_default_action: "action_"
fail2ban_sshd: True
fail2ban_sshd_port: "ssh,2222,22222"
fail2ban_sshd_maxretry: 10
fail2ban_sshd_bantime: "{{ fail2ban_default_bantime }}"
fail2ban_sshd_findtime: "{{ fail2ban_default_findtime }}"

2
fail2ban/templates/jail.local.j2
View File

@ -21,7 +21,7 @@ action = %({{ fail2ban_default_action }})s
[sshd]
enabled = {{ fail2ban_sshd }}
port = ssh,2222,22222
port = {{ fail2ban_sshd_port }}
maxretry = {{ fail2ban_sshd_maxretry }}
findtime = {{ fail2ban_sshd_findtime }}