---
- name: Ensure epel-release is installed (RedHat)
  ansible.builtin.package:
    name: epel-release
    state: present
    update_cache: yes
  when: ansible_os_family == 'RedHat'

- name: Ensure fail2ban is installed
  ansible.builtin.package:
    name: fail2ban
    state: present
    update_cache: yes

- name: Start fail2ban for RedHat
  ansible.builtin.systemd_service:
    name: fail2ban
    state: started
    enabled: true
  when: ansible_os_family == 'RedHat'