35 lines
No EOL
769 B
YAML
35 lines
No EOL
769 B
YAML
---
|
|
|
|
- hosts: 127.0.0.1
|
|
connection: local
|
|
|
|
tasks:
|
|
|
|
- name: This command will echo text to a file as a test
|
|
ansible.builtin.shell:
|
|
cmd: echo 'hello' > /tmp/hello.txt
|
|
|
|
- name: install fail2ban
|
|
ansible.builtin.dnf:
|
|
name: fail2ban
|
|
state: present
|
|
|
|
- name: enable sshd jail
|
|
copy:
|
|
dest: /etc/fail2ban/jail.local
|
|
content: |
|
|
[sshd]
|
|
enabled = true
|
|
port = ssh
|
|
filter = sshd
|
|
logpath = /var/log/auth.log
|
|
maxretry = 3
|
|
findtime = 300
|
|
bantime = 600
|
|
ignoreip = 127.0.0.1,169.231.0.0/16,128.111.0.0/16
|
|
|
|
- name: start fail2ban
|
|
ansible.builtin.systemd_service:
|
|
state: started
|
|
enabled: true
|
|
name: fail2ban |