evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 32 Wiki Activity

fail2ban: change ips variables

Browse source
This commit is contained in:
Jérémy Lecour 2017-07-19 11:39:09 +02:00 committed by Jérémy Lecour
parent 7c92645c5c
commit 2077af2992
3 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
fail2ban/README.md
View file

@ -12,5 +12,6 @@ Main variables are :
* `general_alert_email`: email address to send various alert messages (default: `root@localhost`).
* `fail2ban_alert_email`: email address for messages sent to root (default: `general_alert_email`).
* `fail2ban_ignore_ips`: list of IPs to ignore (default: empty).
The full list of variables (with default values) can be found in `defaults/main.yml`.

2
fail2ban/defaults/main.yml
View file

@ -1,4 +1,4 @@
---
general_alert_email: "root@localhost"
fail2ban_alert_email: Null
fail2ban_ignoreip: []
fail2ban_ignore_ips: []

2
fail2ban/templates/jail.local.j2
View file

@ -3,7 +3,7 @@
[DEFAULT]
# "ignoreip" can be an IP address, a CIDR mask or a DNS host
ignoreip = {{ (['127.0.0.1/8'] + fail2ban_ignoreip) | join(' ') }}
ignoreip = {{ (['127.0.0.1/8'] + fail2ban_ignore_ips) | join(' ') }}
bantime = 600
maxretry = 3