infrastructure/ansible/roles/gateway/tasks/fail2ban.yml

- name: fail2ban filter
  template:
    src: files/nginx-fail2ban-filter.conf
    dest: /etc/fail2ban/filter.d/nginx-tcp.conf
    mode: "0600"
  register: fail2ban_filter

- name: fail2ban jail
  template:
    src: files/nginx-fail2ban-jail.conf
    dest: /etc/fail2ban/jail.d/nginx.conf
    mode: "0600"
  register: fail2ban_jail

- name: Restart fail2ban
  service:
    name: fail2ban
    state: restarted
  when: fail2ban_filter.changed or fail2ban_jail.changed
Revert "Remove fail2ban" This reverts commit 1f0e33acc8f93bcf793bff5a90ee2d0bca780150. 2020-10-16 19:08:49 +01:00			`- name: fail2ban filter`
			`template:`
Replace edge proxy with nginx The config makes more sense, and it has more of the features I need, which will come later. 2021-08-22 22:34:27 +01:00			`src: files/nginx-fail2ban-filter.conf`
			`dest: /etc/fail2ban/filter.d/nginx-tcp.conf`
Set mode on fail2ban filter and jail 2020-10-24 12:10:54 +01:00			`mode: "0600"`
Revert "Remove fail2ban" This reverts commit 1f0e33acc8f93bcf793bff5a90ee2d0bca780150. 2020-10-16 19:08:49 +01:00			`register: fail2ban_filter`

			`- name: fail2ban jail`
			`template:`
Replace edge proxy with nginx The config makes more sense, and it has more of the features I need, which will come later. 2021-08-22 22:34:27 +01:00			`src: files/nginx-fail2ban-jail.conf`
			`dest: /etc/fail2ban/jail.d/nginx.conf`
Set mode on fail2ban filter and jail 2020-10-24 12:10:54 +01:00			`mode: "0600"`
Revert "Remove fail2ban" This reverts commit 1f0e33acc8f93bcf793bff5a90ee2d0bca780150. 2020-10-16 19:08:49 +01:00			`register: fail2ban_jail`

			`- name: Restart fail2ban`
			`service:`
Fix service to restart 2020-10-16 19:16:04 +01:00			`name: fail2ban`
Revert "Remove fail2ban" This reverts commit 1f0e33acc8f93bcf793bff5a90ee2d0bca780150. 2020-10-16 19:08:49 +01:00			`state: restarted`
			`when: fail2ban_filter.changed or fail2ban_jail.changed`