diff --git a/fail2ban/README.md b/fail2ban/README.md index 55168279..af94e38a 100644 --- a/fail2ban/README.md +++ b/fail2ban/README.md @@ -12,5 +12,6 @@ Main variables are : * `general_alert_email`: email address to send various alert messages (default: `root@localhost`). * `fail2ban_alert_email`: email address for messages sent to root (default: `general_alert_email`). +* `fail2ban_ignore_ips`: list of IPs to ignore (default: empty). The full list of variables (with default values) can be found in `defaults/main.yml`. diff --git a/fail2ban/defaults/main.yml b/fail2ban/defaults/main.yml index f08bdf6a..2fe40951 100644 --- a/fail2ban/defaults/main.yml +++ b/fail2ban/defaults/main.yml @@ -1,4 +1,4 @@ --- general_alert_email: "root@localhost" fail2ban_alert_email: Null -fail2ban_ignoreip: [] +fail2ban_ignore_ips: [] diff --git a/fail2ban/templates/jail.local.j2 b/fail2ban/templates/jail.local.j2 index 63d69947..2f4d6bc3 100644 --- a/fail2ban/templates/jail.local.j2 +++ b/fail2ban/templates/jail.local.j2 @@ -3,7 +3,7 @@ [DEFAULT] # "ignoreip" can be an IP address, a CIDR mask or a DNS host -ignoreip = {{ (['127.0.0.1/8'] + fail2ban_ignoreip) | join(' ') }} +ignoreip = {{ (['127.0.0.1/8'] + fail2ban_ignore_ips) | join(' ') }} bantime = 600 maxretry = 3