the-nine-worlds/ansible-edda
the-nine-worlds/ansible-edda
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Update fail2ban configuration

Browse Source
This commit is contained in:
Wojciech Kozlowski 2022-11-02 11:19:53 +01:00
parent 4b9dc63253
commit 9e11c060e8
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
host_vars/.template
View File

@ -5,6 +5,9 @@ subnet:
ethx: ethx:
is_zfs: is_zfs:
# Fail2ban variable:
fail2ban_ignoreip:
# Postfix variables # Postfix variables
postfix_smtp_pass: postfix_smtp_pass:

2
playbooks/filesystem/common/etc/fail2ban/jail.local.j2
View File

@ -3,7 +3,7 @@
# "ignoreip" can be a list of IP addresses, CIDR masks or DNS hosts. Fail2ban # "ignoreip" can be a list of IP addresses, CIDR masks or DNS hosts. Fail2ban
# will not ban a host which matches an address in this list. Several addresses # will not ban a host which matches an address in this list. Several addresses
# can be defined using space (and/or comma) separator. # can be defined using space (and/or comma) separator.
ignoreip = 127.0.0.1/8 ::1 {{ subnet }} ignoreip = 127.0.0.1/8 ::1 {{ fail2ban_ignoreip }}
# "bantime" is the number of seconds that a host is banned. # "bantime" is the number of seconds that a host is banned.
bantime = 1d bantime = 1d