Commit graph

36 commits

Author SHA1 Message Date
Jérémy Lecour 13284645de
fail2ban: fix Ansible syntax
Some checks failed
gitea/ansible-roles/pipeline/head There was a failure building this commit
2024-02-08 11:03:14 +01:00
William Hirigoyen cce7280cd0 fail2ban: add script unban_ip
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2682|3|2679|4|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/457//ansiblelint">Evolix » ansible-roles » unstable #457</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-24 15:24:42 +01:00
Jérémy Lecour bca5b9f28c
fail2ban: fix template marker 2024-01-11 17:46:49 +01:00
Bruno TATU fb184a0ecf Set fail2ban_dbpurgeage_default variable for fail2ban
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2594|5|2589|6|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/284//ansiblelint">Evolix » ansible-roles » unstable #284</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-07-04 15:36:02 +02:00
Jérémy Lecour ee21973371 Use FQCN
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2777|524|2253|2462|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/223//ansiblelint">Evolix » ansible-roles » unstable #223</a>
gitea/ansible-roles/pipeline/head This commit looks good
Fully Qualified Collection Name
2023-03-20 23:33:19 +01:00
Jérémy Lecour 6f96f6b458 Use proper python Boolean 2023-03-16 14:38:32 +01:00
Jérémy Lecour 7a0e0d81d6 Proper jinja spacing
All checks were successful
gitea/ansible-roles/pipeline/head This commit looks good
2022-12-28 09:03:37 +01:00
Ludovic Poujol 8ca237c5f7 fail2ban: Fix indent in tasks/fix-dbpurgeage.yml
All checks were successful
gitea/ansible-roles/pipeline/head This commit looks good
2022-12-27 14:47:55 +01:00
Bruno Tatu 6aac8933b8 Support dbpurgeage if is a number or a string 2022-12-14 17:53:10 +01:00
Bruno TATU e0c95b4c78 Ensure apply dbpurgeage from stretch and buster for fail2ban
All checks were successful
continuous-integration/drone/push Build is passing
2022-07-08 11:26:00 +02:00
Ludovic Poujol 1e19418fb0 Fail2ban: Multiple changes & improvements :
All checks were successful
continuous-integration/drone/push Build is passing
* Give the possibility to override jail.local (with fail2ban_override_jaillocal)
* If jail.local was overriden, add a warning
* Allow to tune some jail settings (maxretry, bantime, findtime) with ansible
* Allow to tune the default action with ansible
* Change default action to ban only (instead of ban + mail with whois report)
* Configure recidive jail (off by default) + extend dbpurgeage
2022-06-08 17:55:58 +02:00
Jérémy Lecour 2ed77c60f0 Improve Ansible syntax
replace « x | changed » by « x is changed »
add explicit « bool » filter
use « length » filter instead of string comparison
2021-05-09 23:06:42 +02:00
Jérémy Lecour 5138065059 Use 'loop' syntax instead of 'with_items' 2021-05-04 14:19:18 +02:00
Jérémy Lecour e2f5094835 trailing space 2020-04-11 12:31:41 +02:00
Patrick Marchand 59c479582e Adds ips tag to fail2ban/tasks/ip_whitelist.yml
You can already skip nginx and apache ip_whitelist tasks with this
tags, it makes sense for fail2ban to follow suite.
2019-01-10 17:03:14 -05:00
Jérémy Lecour df308b0396 fail2ban: fix "ignoreip" update 2019-01-09 16:44:16 +01:00
Jérémy Lecour 42ec5d62c8 whitespaces 2019-01-09 16:43:35 +01:00
Patrick Marchand b776fc3da2 Make ip whitelist tasks more flexible
Now the list of whitelisted ip addresses can be updated simply by
including the specific tasks in an external playbook without polluting
our role list.

This change takes effect for nginx, apache and fail2ban.
2018-11-02 18:08:23 +01:00
Jérémy Lecour 6077986204 fail2ban: fix typo in variable name 2018-08-23 16:48:50 +02:00
Jérémy Lecour 12c49ed93b fail2ban: add a variable to update the list of ignored IP addresses 2018-08-23 11:43:34 +02:00
Jérémy Lecour e939198159 fail2ban: add a variable to disable the ssh filter (default: False) 2018-08-23 09:16:33 +02:00
Jérémy Lecour 012dabf657 fail2ban: fix fail2ban_ignore_ips definition
If the final variable is combined in the defaults file, it's component 
can be overridden, but the final variable can't be overriden.
2018-08-21 23:14:31 +02:00
Jérémy Lecour 8bd94a7c44 fail2ban: fix horrible typo, Python is not Ruby 2018-01-23 18:31:31 +01:00
Jérémy Lecour 25a5ffd6ef fail2ban: Install munin plugin if available 2018-01-18 23:17:20 +01:00
Jérémy Lecour da3838e3e9 fail2ban: create config hierarchy beforehand 2017-11-15 11:46:53 +01:00
Victor LABORIE 206e2e8a0a fail2ban: add roundcube filter 2017-10-25 12:12:18 +02:00
Victor LABORIE 8f7004c977 fail2ban: install filter before package 2017-10-25 12:11:46 +02:00
Victor LABORIE 97e4abb37c fail2ban: add wordpress filters 2017-10-18 15:44:20 +02:00
Jérémy Lecour 030425d9f8 fail2ban: unindent notify attribute 2017-07-19 12:06:19 +02:00
Jérémy Lecour 4099d2a3a4 fail2ban: the local jail should not be overwritten 2017-07-19 11:55:04 +02:00
Jérémy Lecour 3b93ba0768 fail2ban: install local jail before starting 2017-07-19 11:39:38 +02:00
Victor LABORIE 8d4c1f4af5 fail2ban: custom ignoreip + add tags 2017-07-05 12:01:07 +02:00
Jérémy Lecour 294cea44e8 Change mode with leading 0, but still as String 2017-03-23 16:59:43 +01:00
Jérémy Lecour 478e9a8272 replace "state: installed" with "state: present" 2017-01-12 17:37:48 +01:00
Jérémy Lecour 5a4f838375 Unix mode MUST be a quoted string when using octal notation 2017-01-05 12:03:54 +01:00
Jérémy Lecour c0ab8f99ce Squash: conventions, evolinux, etc-git… 2016-12-21 16:12:30 +01:00