From 5eb3870fbe1ae7c53821de79db87617060e70110 Mon Sep 17 00:00:00 2001
From: Jake Howard <git@theorangeone.net>
Date: Sat, 24 Oct 2020 12:10:54 +0100
Subject: [PATCH] Set mode on fail2ban filter and jail

---
 ansible/roles/gateway/tasks/fail2ban.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ansible/roles/gateway/tasks/fail2ban.yml b/ansible/roles/gateway/tasks/fail2ban.yml
index 329e78c..3608810 100644
--- a/ansible/roles/gateway/tasks/fail2ban.yml
+++ b/ansible/roles/gateway/tasks/fail2ban.yml
@@ -7,6 +7,7 @@
   template:
     src: files/haproxy-fail2ban-filter.conf
     dest: /etc/fail2ban/filter.d/haproxy-basic.conf
+    mode: "0600"
   become: true
   register: fail2ban_filter
 
@@ -14,6 +15,7 @@
   template:
     src: files/haproxy-fail2ban-jail.conf
     dest: /etc/fail2ban/jail.d/haproxy.conf
+    mode: "0600"
   become: true
   register: fail2ban_jail