Allow configurable fail2ban IPs

2021-04-13 16:44:49 -04:00 · 2021-04-13 16:44:49 -04:00 · 70ba4b240f
parent ce3554b530
commit 70ba4b240f
2 changed files with 3 additions and 1 deletions
--- a/roles/base/defaults/main.yml
+++ b/roles/base/defaults/main.yml
@ -1,2 +1,4 @@
 ---
 deploy_username: "deploy"
+fail2ban_ignorelist:
+  - 10.0.0.0/8
--- a/roles/base/templates/etc/fail2ban/jail.d/sshd.local.j2
+++ b/roles/base/templates/etc/fail2ban/jail.d/sshd.local.j2
@ -1,7 +1,7 @@
 [DEFAULT]
 maxretry    = 3
 bantime     = 14400
-ignoreip    = 127.0.0.0/8 10.0.0.0/8 198.55.48.48/28
+ignoreip    = 127.0.0.0/8 {% for ignore in fail2ban_ignorelist %}{{ ignore }} {% endfor %}

 [ssh]
 enabled     = true