parallelvirtualcluster
/
pvc-ansible
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Allow configurable fail2ban IPs

This commit is contained in:
Joshua Boniface 2023-09-01 15:42:25 -04:00
parent d9be39a048
commit 29363ebf80
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/base/defaults/main.yml
View File

@ -1,2 +1,4 @@
--- ---
deploy_username: "deploy" deploy_username: "deploy"
fail2ban_ignorelist:
- 10.0.0.0/8

2
roles/base/templates/etc/fail2ban/jail.d/sshd.local.j2
View File

@ -1,7 +1,7 @@
[DEFAULT] [DEFAULT]
maxretry = 3 maxretry = 3
bantime = 14400 bantime = 14400
ignoreip = 127.0.0.0/8 10.0.0.0/8 198.55.48.48/28 ignoreip = 127.0.0.0/8 {% for ignore in fail2ban_ignorelist %}{{ ignore }} {% endfor %}
[ssh] [ssh]
enabled = true enabled = true