initial deployment

2021-06-11 15:01:45 +02:00
parent 7e7cbc3d4a
commit 0ea81cf7c2
9 changed files with 166 additions and 0 deletions
--- a/ansible/configure/fail2ban/protect-sshd.yaml
+++ b/ansible/configure/fail2ban/protect-sshd.yaml
@@ -0,0 +1,18 @@
+---
+- hosts: all
+  become: yes
+  tasks:
+  - name: install fail2ban
+    apt:
+      name:
+        - fail2ban
+      update_cache: yes
+  - name: copy fail2ban configfiles
+    copy:
+      src: configfiles/debian-sshd-default.conf
+      dest: /etc/fail2ban/jail.d/debian-sshd-default.conf
+  - name: restart fail2ban
+    systemd:
+      state: restarted
+      daemon_reload: yes
+      name: fail2ban