new version

roles/01-server_hardening/templates/fail2ban-jail.local.j2

@@ -1,30 +1,12 @@
-# {{ ansible_managed }}
+# Configuration Fail2Ban générée par Ansible
+
 [DEFAULT]
-ignoreip = 127.0.0.1/8 ::1
-bantime = {{ fail2ban_bantime }}
-findtime = {{ fail2ban_findtime }}
-maxretry = {{ fail2ban_maxretry }}
-backend = systemd
+bantime = {{ fail2ban_jail_ssh_bantime }}
+findtime = 600
+maxretry = {{ fail2ban_jail_ssh_maxretry }}
 
 [sshd]
-enabled = true
+enabled = {{ fail2ban_jail_ssh_enabled | lower }}
 port = {{ ssh_port }}
 filter = sshd
-logpath = /var/log/auth.log
-maxretry = {{ fail2ban_maxretry }}
-
-[sshd-ddos]
-enabled = true
-port = {{ ssh_port }}
-filter = sshd-ddos
-logpath = /var/log/auth.log
-maxretry = 10
-
-[minecraft]
-enabled = true
-port = {{ minecraft_port | default(25565) }}
-filter = minecraft
-logpath = {{ minecraft_server_dir | default('/opt/minecraft/server') }}/logs/latest.log
-maxretry = 10
-findtime = 600
-bantime = 3600
+logpath = /var/log/auth.log