Add fail2ban role and clean up yaml lint noise

roles/ensure_timezone/tasks/main.yml

@@ -1,43 +1,45 @@
 ---
 # tasks file for ensure_timezone
-- name: 'include variables'
-  when:
-    - ansible_facts["system"] == 'Linux'
+- name: include variables
+  when: ["ansible_facts[\"system\"] == 'Linux'"]
   ansible.builtin.include_vars:
     file: '{{ lookup("first_found", findme) }}'
-    name: 'ensure_timezone'
+    name: ensure_timezone
   vars:
     findme:
       files:
-        - '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
-        - '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
+        - '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
+          }}-{{ ansible_facts["architecture"] }}.yml'
+        - '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
+          }}-default.yml'
         - '{{ ansible_facts["distribution"] }}-default.yml'
-        - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
-        - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
+        - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
+          }}-{{ ansible_facts["architecture"] }}.yml'
+        - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
+          }}-default.yml'
         - '{{ ansible_facts["os_family"] }}-default.yml'
-        - 'default.yml'
-      paths:
-        - '../vars/'
-      errors: 'ignore'
-- name: 'package discovery'
+        - default.yml
+      paths: [../vars/]
+      errors: ignore
+- name: package discovery
   when:
     - ansible_facts["system"] == 'Linux'
     - ansible_facts["packages"] is not defined
   ansible.builtin.package_facts:
-- name: 'service discovery'
+- name: service discovery
   when:
     - ansible_facts["system"] == 'Linux'
     - ansible_facts["services"] is not defined
   ansible.builtin.service_facts:
-- name: 'Set timezone'
+- name: Set timezone
   community.general.timezone:
     hwclock: '{{ timezone_hwclock }}'
     name: '{{ timezone_name }}'
   notify:
-    - 'ensure_timezone.package_facts'
-    - 'ensure_timezone.service_facts'
-    - 'ensure_timezone.service_restart'
-- name: 'ensure packages'
+    - ensure_timezone.package_facts
+    - ensure_timezone.service_facts
+    - ensure_timezone.service_restart
+- name: ensure packages
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_timezone is defined
@@ -49,10 +51,8 @@
   loop: '{{ ensure_timezone.package_list }}'
   loop_control:
     label: '{{ item.name }} will be {{ item.state }}'
-  notify:
-    - 'ensure_timezone.package_facts'
-    - 'ensure_timezone.service_facts'
-- name: 'ensure configurations'
+  notify: [ensure_timezone.package_facts, ensure_timezone.service_facts]
+- name: ensure configurations
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_timezone is defined
@@ -73,11 +73,11 @@
   loop_control:
     label: '{{ item.dest }} will be ensured'
   notify:
-    - 'ensure_timezone.package_facts'
-    - 'ensure_timezone.service_facts'
-    - 'ensure_timezone.service_reload'
-    - 'ensure_timezone.service_restart'
-- name: 'ensure services'
+    - ensure_timezone.package_facts
+    - ensure_timezone.service_facts
+    - ensure_timezone.service_reload
+    - ensure_timezone.service_restart
+- name: ensure services
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_timezone is defined
@@ -90,10 +90,8 @@
   loop: '{{ ensure_timezone.service_list }}'
   loop_control:
     label: '{{ item.name }} will be {{ item.state }}'
-  notify:
-    - 'ensure_timezone.package_facts'
-    - 'ensure_timezone.service_facts'
-- name: 'Ensure SELinux is configured'
+  notify: [ensure_timezone.package_facts, ensure_timezone.service_facts]
+- name: Ensure SELinux is configured
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_timezone is defined
@@ -102,8 +100,8 @@
   ansible.posix.selinux:
     policy: '{{ ensure_timezone.selinux_policy }}'
     state: '{{ ensure_timezone.selinux_state }}'
-  register: 'ensure_timezone_results'
-- name: 'Reboot if required'
+  register: ensure_timezone_results
+- name: Reboot if required
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_timezone is defined
@@ -113,7 +111,7 @@
     - ensure_timezone_results.reboot_required is defined
     - ensure_timezone_results.reboot_required
   ansible.builtin.reboot:
-- name: 'ensure seboolean'
+- name: ensure seboolean
   when:
     - ansible_facts["system"] == 'Linux'
     - ensure_timezone is defined
@@ -126,6 +124,5 @@
   loop: '{{ ensure_timezone.seboolean_list }}'
   loop_control:
     label: '{{ item.name }} will be {{ item.state }}'
-- name: 'flush handlers'
-  ansible.builtin.meta: 'flush_handlers'
-...
+- name: flush handlers
+  ansible.builtin.meta: flush_handlers