Revert "Remove fail2ban"

This reverts commit 1f0e33acc8.
This commit is contained in:
Jake Howard 2020-10-16 19:08:49 +01:00
parent 30baed441e
commit 4890c3d3e5
Signed by: jake
GPG key ID: 57AFB45680EDD477
4 changed files with 40 additions and 0 deletions

View file

@ -0,0 +1,4 @@
[Definition]
failregex = ^.*haproxy\[[0-9]+\]: <HOST>:.*$
ignoreregex =

View file

@ -0,0 +1,8 @@
[haproxy]
enabled = true
bantime = 600
findtime = 120
maxretry = 15
filter = haproxy-basic
logpath = /var/log/haproxy.log
port = http,https

View file

@ -0,0 +1,25 @@
- name: Install fail2ban
apt:
name: fail2ban
become: true
- name: fail2ban filter
template:
src: files/haproxy-fail2ban-filter.conf
dest: /etc/fail2ban/filter.d/haproxy-basic.conf
become: true
register: fail2ban_filter
- name: fail2ban jail
template:
src: files/haproxy-fail2ban-jail.conf
dest: /etc/fail2ban/jail.d/haproxy.conf
become: true
register: fail2ban_jail
- name: Restart fail2ban
service:
name: haproxy
state: restarted
become: true
when: fail2ban_filter.changed or fail2ban_jail.changed

View file

@ -3,3 +3,6 @@
- name: Configure wireguard - name: Configure wireguard
include: wireguard.yml include: wireguard.yml
- name: Configure fail2ban
include: fail2ban.yml