Add fail2ban role and clean up yaml lint noise

roles/ensure_apache/vars/Fedora-43-default.yml

@@ -1,229 +1,259 @@
 ---
 # vars file for ensure_apache
 package_list:
-  - name: 'httpd'
-    state: 'present'
-  - name: 'httpd-filesystem'
-    state: 'present'
-  - name: 'httpd-tools'
-    state: 'present'
-  - name: 'mod_http2'
-    state: 'present'
-  - name: 'mod_md'
-    state: 'present'
-  - name: 'mod_ssl'
-    state: 'present'
-  - name: 'php'
-    state: 'present'
-  - name: 'php-cli'
-    state: 'present'
-  - name: 'php-common'
-    state: 'present'
-  - name: 'php-fpm'
-    state: 'present'
-  - name: 'php-mbstring'
-    state: 'present'
-  - name: 'php-mysqlnd'
-    state: 'present'
-  - name: 'php-opcache'
-    state: 'present'
-  - name: 'php-pdo'
-    state: 'present'
-  - name: 'php-sodium'
-    state: 'present'
-  - name: 'php-xml'
-    state: 'present'
+  - name: httpd
+    state: present
+  - name: httpd-filesystem
+    state: present
+  - name: httpd-tools
+    state: present
+  - name: mod_http2
+    state: present
+  - name: mod_md
+    state: present
+  - name: mod_ssl
+    state: present
+  - name: php
+    state: present
+  - name: php-cli
+    state: present
+  - name: php-common
+    state: present
+  - name: php-fpm
+    state: present
+  - name: php-mbstring
+    state: present
+  - name: php-mysqlnd
+    state: present
+  - name: php-opcache
+    state: present
+  - name: php-pdo
+    state: present
+  - name: php-sodium
+    state: present
+  - name: php-xml
+    state: present
 firewall_list:
   - permanent: 'yes'
-    service: 'http'
-    state: 'enabled'
+    service: http
+    state: enabled
   - permanent: 'yes'
-    service: 'https'
-    state: 'enabled'
+    service: https
+    state: enabled
 permission_list:
-  - path: '/etc/httpd/md'
-    group: 'apache'
-    owner: 'root'
+  - path: /etc/httpd/md
+    group: apache
+    owner: root
     mode: '0770'
-    state: 'directory'
-    setype: 'httpd_var_lib_t'
+    state: directory
+    setype: httpd_var_lib_t
 seboolean_list:
-  - name: 'httpd_can_network_connect'
+  - name: httpd_can_network_connect
     persistent: 'yes'
     state: 'yes'
-  - name: 'httpd_can_network_connect_db'
+  - name: httpd_can_network_connect_db
     persistent: 'yes'
     state: 'yes'
 service_list:
-  - name: 'httpd.service'
-    state: 'started'
+  - name: httpd.service
+    state: started
     enabled: 'yes'
-  - name: 'httpd-reload.timer'
-    state: 'started'
+  - name: httpd-reload.timer
+    state: started
     enabled: 'yes'
-  - name: 'php-fpm.service'
-    state: 'started'
+  - name: php-fpm.service
+    state: started
     enabled: 'yes'
 template_list:
-  - dest: '/etc/httpd/conf.d/autoindex.conf'
-    group: 'root'
+  - dest: /etc/httpd/conf.d/autoindex.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.d/autoindex.conf'
-  - dest: '/etc/httpd/conf.d/README'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.d/autoindex.conf'
+  - dest: /etc/httpd/conf.d/README
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.d/README'
-  - dest: '/etc/httpd/conf.d/vhost.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.d/README'
+  - dest: /etc/httpd/conf.d/vhost.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.d/vhost.conf'
-  - dest: '/etc/httpd/conf.d/ssl.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.d/vhost.conf'
+  - dest: /etc/httpd/conf.d/ssl.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.d/ssl.conf'
-  - dest: '/etc/httpd/conf.d/userdir.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.d/ssl.conf'
+  - dest: /etc/httpd/conf.d/userdir.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.d/userdir.conf'
-  - dest: '/etc/httpd/conf.d/welcome.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.d/userdir.conf'
+  - dest: /etc/httpd/conf.d/welcome.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.d/welcome.conf'
-  - dest: '/etc/httpd/conf/httpd.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.d/welcome.conf'
+  - dest: /etc/httpd/conf/httpd.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf/httpd.conf'
-  - dest: '/etc/httpd/conf/magic'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf/httpd.conf'
+  - dest: /etc/httpd/conf/magic
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf/magic'
-  - dest: '/etc/httpd/conf.modules.d/00-base.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf/magic'
+  - dest: /etc/httpd/conf.modules.d/00-base.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/00-base.conf'
-  - dest: '/etc/httpd/conf.modules.d/00-brotli.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/00-base.conf'
+  - dest: /etc/httpd/conf.modules.d/00-brotli.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/00-brotli.conf'
-  - dest: '/etc/httpd/conf.modules.d/00-dav.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/00-brotli.conf'
+  - dest: /etc/httpd/conf.modules.d/00-dav.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/00-dav.conf'
-  - dest: '/etc/httpd/conf.modules.d/00-lua.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/00-dav.conf'
+  - dest: /etc/httpd/conf.modules.d/00-lua.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/00-lua.conf'
-  - dest: '/etc/httpd/conf.modules.d/00-mpm.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/00-lua.conf'
+  - dest: /etc/httpd/conf.modules.d/00-mpm.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/00-mpm.conf'
-  - dest: '/etc/httpd/conf.modules.d/00-optional.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/00-mpm.conf'
+  - dest: /etc/httpd/conf.modules.d/00-optional.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/00-optional.conf'
-  - dest: '/etc/httpd/conf.modules.d/00-proxy.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/00-optional.conf'
+  - dest: /etc/httpd/conf.modules.d/00-proxy.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/00-proxy.conf'
-  - dest: '/etc/httpd/conf.modules.d/00-ssl.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/00-proxy.conf'
+  - dest: /etc/httpd/conf.modules.d/00-ssl.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/00-ssl.conf'
-  - dest: '/etc/httpd/conf.modules.d/00-systemd.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/00-ssl.conf'
+  - dest: /etc/httpd/conf.modules.d/00-systemd.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/00-systemd.conf'
-  - dest: '/etc/httpd/conf.modules.d/01-cgi.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/00-systemd.conf'
+  - dest: /etc/httpd/conf.modules.d/01-cgi.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/01-cgi.conf'
-  - dest: '/etc/httpd/conf.modules.d/01-md.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/01-cgi.conf'
+  - dest: /etc/httpd/conf.modules.d/01-md.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/01-md.conf'
-  - dest: '/etc/httpd/conf.modules.d/10-h2.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/01-md.conf'
+  - dest: /etc/httpd/conf.modules.d/10-h2.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/10-h2.conf'
-  - dest: '/etc/httpd/conf.modules.d/10-proxy_h2.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/10-h2.conf'
+  - dest: /etc/httpd/conf.modules.d/10-proxy_h2.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/10-proxy_h2.conf'
-  - dest: '/etc/httpd/conf.modules.d/README'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/10-proxy_h2.conf'
+  - dest: /etc/httpd/conf.modules.d/README
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.modules.d/README'
-  - dest: '/etc/logrotate.d/httpd'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/httpd/conf.modules.d/README'
+  - dest: /etc/logrotate.d/httpd
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/logrotate.d/httpd'
-  - dest: '/etc/sysconfig/htcacheclean'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/logrotate.d/httpd'
+  - dest: /etc/sysconfig/htcacheclean
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sysconfig/htcacheclean'
-  - dest: '/usr/lib/systemd/system/htcacheclean.service'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/sysconfig/htcacheclean'
+  - dest: /usr/lib/systemd/system/htcacheclean.service
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/htcacheclean.service'
-  - dest: '/usr/lib/systemd/system/httpd.service'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/usr/lib/systemd/system/htcacheclean.service'
+  - dest: /usr/lib/systemd/system/httpd.service
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/httpd.service'
-  - dest: '/usr/lib/systemd/system/httpd.socket'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/usr/lib/systemd/system/httpd.service'
+  - dest: /usr/lib/systemd/system/httpd.socket
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/httpd.socket'
-  - dest: '/usr/lib/systemd/system/httpd-init.service'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/usr/lib/systemd/system/httpd.socket'
+  - dest: /usr/lib/systemd/system/httpd-init.service
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/httpd-init.service'
-  - dest: '/usr/lib/systemd/system/httpd-reload.service'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/usr/lib/systemd/system/httpd-init.service'
+  - dest: /usr/lib/systemd/system/httpd-reload.service
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/httpd-reload.service'
-  - dest: '/usr/lib/systemd/system/httpd-reload.timer'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/usr/lib/systemd/system/httpd-reload.service'
+  - dest: /usr/lib/systemd/system/httpd-reload.timer
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/httpd-reload.timer'
-  - dest: '/usr/lib/systemd/system/httpd@.service'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/usr/lib/systemd/system/httpd-reload.timer'
+  - dest: /usr/lib/systemd/system/httpd@.service
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/httpd@.service'
-  - dest: '/usr/lib/systemd/system/httpd.socket.d/10-listen443.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/usr/lib/systemd/system/httpd@.service'
+  - dest: /usr/lib/systemd/system/httpd.socket.d/10-listen443.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/httpd.socket.d/10-listen443.conf'
-...
-
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/usr/lib/systemd/system/httpd.socket.d/10-listen443.conf'