Add fail2ban role and clean up yaml lint noise

roles/ensure_sudo/vars/OracleLinux-10-default.yml

@@ -1,40 +1,44 @@
 ---
 # vars file for ensure_sudo
 package_list:
-  - name: 'libsss_sudo'
-    state: 'present'
-  - name: 'sudo'
-    state: 'present'
+  - name: libsss_sudo
+    state: present
+  - name: sudo
+    state: present
 template_list:
-  - dest: '/etc/dnf/protected.d/sudo.conf'
-    group: 'root'
+  - dest: /etc/dnf/protected.d/sudo.conf
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/dnf/protected.d/sudo.conf'
-  - dest: '/etc/pam.d/sudo'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/dnf/protected.d/sudo.conf'
+  - dest: /etc/pam.d/sudo
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo'
-  - dest: '/etc/pam.d/sudo-i'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/pam.d/sudo'
+  - dest: /etc/pam.d/sudo-i
+    group: root
     mode: '0644'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/pam.d/sudo-i'
-  - dest: '/etc/sudo.conf'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/pam.d/sudo-i'
+  - dest: /etc/sudo.conf
+    group: root
     mode: '0640'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudo.conf'
-  - dest: '/etc/sudoers'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/sudo.conf'
+  - dest: /etc/sudoers
+    group: root
     mode: '0440'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers'
-  - dest: '/etc/sudoers.d/session_log'
-    group: 'root'
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/sudoers'
+  - dest: /etc/sudoers.d/session_log
+    group: root
     mode: '0440'
-    owner: 'root'
-    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/sudoers.d/session_log.j2'
-...
-
+    owner: root
+    src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
+      }}/etc/sudoers.d/session_log.j2'