AnsiblePlaybooks/test
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add fail2ban role and clean up yaml lint noise

Browse Source
This commit is contained in:
jmrothst
2026-08-08 23:50:32 -05:00
parent 9b837dd780
commit 6c7ecfc724
352 changed files with 4632 additions and 4186 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/ensure_fail2ban/templates/Debian/11/etc/fail2ban/jail.d/99-custom_jails.conf.j2
+37
View File
@@ -0,0 +1,37 @@
# Default block/ban configuration
[DEFAULT]
bantime = 1h
findtime = 10m
maxretry = 5
banaction = iptables-multiport
backend = systemd
# SSH is enabled on all servers
[sshd]
enabled = true
# Apache
[apache-auth]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-badbots]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-noscript]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-overflows]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
# Postfix
[postfix]
enabled = {{ 'true' if 'postfix' in ansible_facts.packages else 'false' }}
# Dovecot
[dovecot]
enabled = {{ 'true' if 'dovecot' in ansible_facts.packages or 'dovecot-core' in ansible_facts.packages else 'false' }}
# MariaDB / MySQL
[mysqld-auth]
enabled = {{ 'true' if ('mariadb-server' in ansible_facts.packages or 'mariadb' in ansible_facts.packages or 'mysql-server' in ansible_facts.packages) else 'false' }}
roles/ensure_fail2ban/templates/Debian/12/etc/fail2ban/jail.d/99-custom_jails.conf.j2
+37
View File
@@ -0,0 +1,37 @@
# Default block/ban configuration
[DEFAULT]
bantime = 1h
findtime = 10m
maxretry = 5
banaction = iptables-multiport
backend = systemd
# SSH is enabled on all servers
[sshd]
enabled = true
# Apache
[apache-auth]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-badbots]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-noscript]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-overflows]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
# Postfix
[postfix]
enabled = {{ 'true' if 'postfix' in ansible_facts.packages else 'false' }}
# Dovecot
[dovecot]
enabled = {{ 'true' if 'dovecot' in ansible_facts.packages or 'dovecot-core' in ansible_facts.packages else 'false' }}
# MariaDB / MySQL
[mysqld-auth]
enabled = {{ 'true' if ('mariadb-server' in ansible_facts.packages or 'mariadb' in ansible_facts.packages or 'mysql-server' in ansible_facts.packages) else 'false' }}
roles/ensure_fail2ban/templates/Debian/13/etc/fail2ban/jail.d/99-custom_jails.conf.j2
+37
View File
@@ -0,0 +1,37 @@
# Default block/ban configuration
[DEFAULT]
bantime = 1h
findtime = 10m
maxretry = 5
banaction = iptables-multiport
backend = systemd
# SSH is enabled on all servers
[sshd]
enabled = true
# Apache
[apache-auth]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-badbots]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-noscript]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-overflows]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
# Postfix
[postfix]
enabled = {{ 'true' if 'postfix' in ansible_facts.packages else 'false' }}
# Dovecot
[dovecot]
enabled = {{ 'true' if 'dovecot' in ansible_facts.packages or 'dovecot-core' in ansible_facts.packages else 'false' }}
# MariaDB / MySQL
[mysqld-auth]
enabled = {{ 'true' if ('mariadb-server' in ansible_facts.packages or 'mariadb' in ansible_facts.packages or 'mysql-server' in ansible_facts.packages) else 'false' }}
roles/ensure_fail2ban/templates/Fedora/43/etc/fail2ban/jail.d/99-custom_jails.conf.j2
+37
View File
@@ -0,0 +1,37 @@
# Default block/ban configuration
[DEFAULT]
bantime = 1h
findtime = 10m
maxretry = 5
banaction = firewallcmd-rich-rules
backend = systemd
# SSH is enabled on all servers
[sshd]
enabled = true
# Apache
[apache-auth]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-badbots]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-noscript]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-overflows]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
# Postfix
[postfix]
enabled = {{ 'true' if 'postfix' in ansible_facts.packages else 'false' }}
# Dovecot
[dovecot]
enabled = {{ 'true' if 'dovecot' in ansible_facts.packages or 'dovecot-core' in ansible_facts.packages else 'false' }}
# MariaDB / MySQL
[mysqld-auth]
enabled = {{ 'true' if ('mariadb-server' in ansible_facts.packages or 'mariadb' in ansible_facts.packages or 'mysql-server' in ansible_facts.packages) else 'false' }}
roles/ensure_fail2ban/templates/Fedora/44/etc/fail2ban/jail.d/99-custom_jails.conf.j2
+37
View File
@@ -0,0 +1,37 @@
# Default block/ban configuration
[DEFAULT]
bantime = 1h
findtime = 10m
maxretry = 5
banaction = firewallcmd-rich-rules
backend = systemd
# SSH is enabled on all servers
[sshd]
enabled = true
# Apache
[apache-auth]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-badbots]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-noscript]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-overflows]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
# Postfix
[postfix]
enabled = {{ 'true' if 'postfix' in ansible_facts.packages else 'false' }}
# Dovecot
[dovecot]
enabled = {{ 'true' if 'dovecot' in ansible_facts.packages or 'dovecot-core' in ansible_facts.packages else 'false' }}
# MariaDB / MySQL
[mysqld-auth]
enabled = {{ 'true' if ('mariadb-server' in ansible_facts.packages or 'mariadb' in ansible_facts.packages or 'mysql-server' in ansible_facts.packages) else 'false' }}
roles/ensure_fail2ban/templates/Ubuntu/22/etc/fail2ban/jail.d/99-custom_jails.conf.j2
+37
View File
@@ -0,0 +1,37 @@
# Default block/ban configuration
[DEFAULT]
bantime = 1h
findtime = 10m
maxretry = 5
banaction = iptables-multiport
backend = systemd
# SSH is enabled on all servers
[sshd]
enabled = true
# Apache
[apache-auth]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-badbots]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-noscript]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-overflows]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
# Postfix
[postfix]
enabled = {{ 'true' if 'postfix' in ansible_facts.packages else 'false' }}
# Dovecot
[dovecot]
enabled = {{ 'true' if 'dovecot' in ansible_facts.packages or 'dovecot-core' in ansible_facts.packages else 'false' }}
# MariaDB / MySQL
[mysqld-auth]
enabled = {{ 'true' if ('mariadb-server' in ansible_facts.packages or 'mariadb' in ansible_facts.packages or 'mysql-server' in ansible_facts.packages) else 'false' }}
roles/ensure_fail2ban/templates/Ubuntu/24/etc/fail2ban/jail.d/99-custom_jails.conf.j2
+37
View File
@@ -0,0 +1,37 @@
# Default block/ban configuration
[DEFAULT]
bantime = 1h
findtime = 10m
maxretry = 5
banaction = iptables-multiport
backend = systemd
# SSH is enabled on all servers
[sshd]
enabled = true
# Apache
[apache-auth]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-badbots]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-noscript]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-overflows]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
# Postfix
[postfix]
enabled = {{ 'true' if 'postfix' in ansible_facts.packages else 'false' }}
# Dovecot
[dovecot]
enabled = {{ 'true' if 'dovecot' in ansible_facts.packages or 'dovecot-core' in ansible_facts.packages else 'false' }}
# MariaDB / MySQL
[mysqld-auth]
enabled = {{ 'true' if ('mariadb-server' in ansible_facts.packages or 'mariadb' in ansible_facts.packages or 'mysql-server' in ansible_facts.packages) else 'false' }}
roles/ensure_fail2ban/templates/Ubuntu/26/etc/fail2ban/jail.d/99-custom_jails.conf.j2
+37
View File
@@ -0,0 +1,37 @@
# Default block/ban configuration
[DEFAULT]
bantime = 1h
findtime = 10m
maxretry = 5
banaction = iptables-multiport
backend = systemd
# SSH is enabled on all servers
[sshd]
enabled = true
# Apache
[apache-auth]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-badbots]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-noscript]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
[apache-overflows]
enabled = {{ 'true' if ('httpd' in ansible_facts.packages or 'apache2' in ansible_facts.packages) else 'false' }}
# Postfix
[postfix]
enabled = {{ 'true' if 'postfix' in ansible_facts.packages else 'false' }}
# Dovecot
[dovecot]
enabled = {{ 'true' if 'dovecot' in ansible_facts.packages or 'dovecot-core' in ansible_facts.packages else 'false' }}
# MariaDB / MySQL
[mysqld-auth]
enabled = {{ 'true' if ('mariadb-server' in ansible_facts.packages or 'mariadb' in ansible_facts.packages or 'mysql-server' in ansible_facts.packages) else 'false' }}