Tentative role for fail2ban

2026-03-16 16:43:38 +01:00
parent 192c6f59bb
commit f36556a850
3 changed files with 39 additions and 0 deletions
--- a/roles/fail2ban/tasks/main.yml
+++ b/roles/fail2ban/tasks/main.yml
@@ -0,0 +1,20 @@
+---
+- name: Ensure epel-release is installed (RedHat)
+  ansible.builtin.package:
+    name: epel-release
+    state: present
+    update_cache: yes
+  when: ansible_os_family == 'RedHat'
+
+- name: Ensure fail2ban is installed
+  ansible.builtin.package:
+    name: fail2ban
+    state: present
+    update_cache: yes
+
+- name: Start fail2ban for RedHat
+  ansible.builtin.systemd_service:
+    name: fail2ban
+    state: started
+    enabled: true
+  when: ansible_os_family == 'RedHat'