Ensure fail2ban and logrotate are available on all machines

2020-12-27 22:39:33 +00:00
parent b11dbfc829
commit 58879d2e1d
8 changed files with 69 additions and 6 deletions
--- a/ansible/roles/base/files/ssh-jail.conf
+++ b/ansible/roles/base/files/ssh-jail.conf
@ -0,0 +1,7 @@
+[sshd]
+enabled  = true
+bantime  = 600
+findtime = 30
+maxretry = 5
+port     = {{ ssh_port }},ssh
+ignoreip = {{ wireguard.cidr }}