Skip to content

Commit ec22dd3

Browse files
committed
enable appliances_task_mode for fail2ban
1 parent 00baec7 commit ec22dd3

File tree

4 files changed

+29
-28
lines changed

4 files changed

+29
-28
lines changed

Diff for: ansible/bootstrap.yml

+3-2
Original file line numberDiff line numberDiff line change
@@ -117,8 +117,9 @@
117117
become: yes
118118
tags: fail2ban
119119
tasks:
120-
- import_role:
120+
- include_role:
121121
name: fail2ban
122+
tasks_from: "{{ appliances_task_mode }}.yml"
122123

123124
- name: Setup podman
124125
gather_facts: false
@@ -127,7 +128,7 @@
127128
tasks:
128129
- include_role:
129130
name: podman
130-
tasks_from: "{{ appliances_task_mode }}.yml"
131+
tasks_from: "{{ appliances_task_mode }}.yml"
131132

132133
- hosts: update
133134
gather_facts: false

Diff for: ansible/roles/fail2ban/tasks/configure.yml

+14
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
- name: Create config
2+
template:
3+
dest: /etc/fail2ban/jail.local
4+
src: jail.local.j2
5+
notify: Restart fail2ban
6+
7+
- name: flush handlers
8+
meta: flush_handlers
9+
10+
- name: Ensure fail2ban running even if no config change
11+
service:
12+
name: fail2ban
13+
state: started
14+
enabled: true

Diff for: ansible/roles/fail2ban/tasks/install.yml

+10
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
- name: Install EPEL repo
2+
package:
3+
name: epel-release
4+
5+
- name: Install fail2ban packages
6+
package:
7+
name:
8+
- fail2ban-server
9+
- fail2ban-firewalld
10+
state: present

Diff for: ansible/roles/fail2ban/tasks/main.yml

+2-26
Original file line numberDiff line numberDiff line change
@@ -1,26 +1,2 @@
1-
---
2-
- name: Install EPEL repo
3-
package:
4-
name: epel-release
5-
6-
- name: Install fail2ban packages
7-
package:
8-
name:
9-
- fail2ban-server
10-
- fail2ban-firewalld
11-
state: present
12-
13-
- name: Create config
14-
template:
15-
dest: /etc/fail2ban/jail.local
16-
src: jail.local.j2
17-
notify: Restart fail2ban
18-
19-
- name: flush handlers
20-
meta: flush_handlers
21-
22-
- name: Ensure fail2ban running even if no config change
23-
service:
24-
name: fail2ban
25-
state: started
26-
enabled: true
1+
- import_tasks: install.yml
2+
- import_tasks: configure.yml

0 commit comments

Comments
 (0)