initial

Signed-off-by: Dmitriy Safronov <zimniy@cyberbrain.pw>

README.md

 # ansible_role-template
+
+Install & configure fail2ban.

defaults/main.yml

+fail2ban_fail2ban_local: |
+  loglevel = INFO
+
+fail2ban_jail_local: |
+  bantime.rndtime = 300

handlers/main.yml

+- name: Restart fail2ban service
+  ansible.builtin.systemd:
+    state: restarted
+    enabled: yes
+    masked: no
+    daemon_reload: yes
+    name: fail2ban.service

meta/main.yml

 collections: []
 dependencies: []
 galaxy_info:
-  author: template
-  description: template
+  author: Dmitriy Safronov
+  description: Install & configure fail2ban.
   license: Apache-2.0
   min_ansible_version: "2.16"
-  namespace: template
-  role_name: template
+  namespace: dmitriysafronov
+  role_name: fail2ban

tasks/main.yml

+- name: Install packages
+  ansible.builtin.package:
+    name: fail2ban
+    state: present
+  notify: Restart fail2ban service
+
+- name: Template a file to /etc/fail2ban/fail2ban.local
+  ansible.builtin.template:
+    src: fail2ban.local.j2
+    dest: /etc/fail2ban/fail2ban.local
+    owner: root
+    group: root
+    mode: "0644"
+  when: fail2ban_fail2ban_local is defined
+  notify: Restart fail2ban service
+
+- name: Template a file to /etc/fail2ban/jail.local
+  ansible.builtin.template:
+    src: jail.local.j2
+    dest: /etc/fail2ban/jail.local
+    owner: root
+    group: root
+    mode: "0644"
+  when: fail2ban_jail_local is defined
+  notify: Restart fail2ban service

templates/fail2ban.local.j2

+{{ ansible_managed | comment }}
+
+[DEFAULT]
+logtarget = SYSLOG
+
+{{ fail2ban_fail2ban_local | default('') }}

templates/jail.local.j2

+{{ ansible_managed | comment }}
+
+[DEFAULT]
+backend = systemd
+
+{{ fail2ban_jail_local | default('') }}