update

roles/01-server_hardening/templates/fail2ban.local.j2

@@ -0,0 +1,26 @@
+[DEFAULT]
+# Fail2ban configuration for Minecraft server
+bantime = {{ fail2ban_bantime }}
+findtime = {{ fail2ban_findtime }}
+maxretry = {{ fail2ban_maxretry }}
+
+# Email notifications (optional)
+# destemail = admin@example.com
+# sendername = Fail2Ban
+# sender = fail2ban@example.com
+# action = %(action_mwl)s
+
+[sshd]
+enabled = true
+port = {{ ssh_port }}
+filter = sshd
+logpath = /var/log/auth.log
+maxretry = {{ fail2ban_maxretry }}
+
+[minecraft]
+enabled = true
+port = {{ minecraft_port }}
+filter = minecraft
+logpath = {{ minecraft_server_dir }}/logs/latest.log
+maxretry = 5
+bantime = 7200