Add fail2ban role and clean up yaml lint noise

This commit is contained in:
2026-08-08 23:50:32 -05:00
parent 9b837dd780
commit 6c7ecfc724
352 changed files with 4632 additions and 4186 deletions
+35 -31
View File
@@ -1,43 +1,47 @@
---
# vars file for ensure_dovecot
package_list:
- name: 'dovecot'
state: 'present'
- name: 'dovecot-fts-xapian'
state: 'present'
- name: 'dovecot-mysql'
state: 'present'
- name: 'dovecot-pigeonhole'
state: 'present'
- name: dovecot
state: present
- name: dovecot-fts-xapian
state: present
- name: dovecot-mysql
state: present
- name: dovecot-pigeonhole
state: present
firewall_list:
- permanent: 'yes'
service: 'imap'
state: 'enabled'
service: imap
state: enabled
- permanent: 'yes'
service: 'imaps'
state: 'enabled'
service: imaps
state: enabled
service_list:
- enabled: 'yes'
name: 'dovecot.service'
state: 'started'
name: dovecot.service
state: started
- enabled: 'yes'
name: 'dovecot-copytls.service'
state: 'started'
name: dovecot-copytls.service
state: started
- enabled: 'yes'
name: 'dovecot-copytls.timer'
state: 'started'
name: dovecot-copytls.timer
state: started
template_list:
- dest: '/etc/dovecot/dovecot.conf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dovecot/dovecot.conf'
- dest: '/etc/dovecot/conf.d/local.conf'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dovecot/conf.d/local.conf'
- dest: '/etc/dovecot/accounts'
group: 'dovecot'
- dest: /etc/dovecot/dovecot.conf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dovecot/dovecot.conf'
- dest: /etc/dovecot/conf.d/local.conf
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dovecot/conf.d/local.conf'
- dest: /etc/dovecot/accounts
group: dovecot
mode: '0600'
owner: 'dovecot'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dovecot/accounts'
- dest: '/usr/lib/systemd/system/dovecot-copytls.service'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/dovecot-copytls.service'
- dest: '/usr/lib/systemd/system/dovecot-copytls.timer'
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/dovecot-copytls.timer'
...
owner: dovecot
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/etc/dovecot/accounts'
- dest: /usr/lib/systemd/system/dovecot-copytls.service
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/usr/lib/systemd/system/dovecot-copytls.service'
- dest: /usr/lib/systemd/system/dovecot-copytls.timer
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
}}/usr/lib/systemd/system/dovecot-copytls.timer'