evolix
/
ansible-roles
16
2
Fork 0
Code Issues 50 Pull Requests 9 Releases 27 Wiki Activity
Ansible roles by Evolix
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2094 Commits
42 Branches
11MB
Branch: stable
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'stable'
${ noResults }
ansible-roles/fail2ban
Jérémy Lecour e2f5094835 trailing space 1 month ago
..
defaults fail2ban: add a variable to update the list of ignored IP addresses 1 year ago
files fail2ban: add roundcube filter 2 years ago
handlers fail2ban: Install munin plugin if available 2 years ago
meta change repositories URL 1 year ago
tasks trailing space 1 month ago
templates fail2ban: For sshd jail, protect 2222 port too 1 year ago
tests Add tests for many roles 3 years ago
.kitchen.yml Kitchen: Change base image to evolix/ansible 3 years ago
README.md apache/nginx/fail2ban: mention ip_whitelist.yml in README.md 1 year ago

README.md

fail2ban

Install Fail2ban.

Tasks

Everything is in the tasks/main.yml file.

An ip_whitelist.yml standalone task file is available to update IP adresses whitelist without rolling the whole role.

Available variables

Main variables are :

  • general_alert_email: email address to send various alert messages (default: root@localhost).
  • fail2ban_alert_email: email address for messages sent to root (default: general_alert_email).
  • fail2ban_default_ignore_ips: default list of IPs to ignore (default: empty).
  • fail2ban_additional_ignore_ips: additional list of IPs to ignore (default: empty).
  • fail2ban_disable_ssh: if true, the “sshd” filter is disabled, otherwise nothing is done, not even enabling the filter (default: False).

The full list of variables (with default values) can be found in defaults/main.yml.