check new version

roles/01-server_hardening/templates/fail2ban-jail.local.j2

@@ -1,11 +1,30 @@
+# {{ ansible_managed }}
 [DEFAULT]
-bantime = {{ fail2ban_jail_ssh_bantime }}
-findtime = 600
-maxretry = {{ fail2ban_jail_ssh_maxretry }}
+ignoreip = 127.0.0.1/8 ::1
+bantime = {{ fail2ban_bantime }}
+findtime = {{ fail2ban_findtime }}
+maxretry = {{ fail2ban_maxretry }}
+backend = systemd
 
 [sshd]
-enabled = {{ fail2ban_jail_ssh_enabled | ternary('true', 'false') }}
-port = {{ fail2ban_jail_ssh_port }}
+enabled = true
+port = {{ ssh_port }}
 filter = sshd
 logpath = /var/log/auth.log
-maxretry = {{ fail2ban_jail_ssh_maxretry }}
+maxretry = {{ fail2ban_maxretry }}
+
+[sshd-ddos]
+enabled = true
+port = {{ ssh_port }}
+filter = sshd-ddos
+logpath = /var/log/auth.log
+maxretry = 10
+
+[minecraft]
+enabled = true
+port = {{ minecraft_port | default(25565) }}
+filter = minecraft
+logpath = {{ minecraft_server_dir | default('/opt/minecraft/server') }}/logs/latest.log
+maxretry = 10
+findtime = 600
+bantime = 3600