Improvements for ansible-linting

2023-05-04 01:44:18 -04:00
parent dfd93dd5f8
commit 9142254a57
13 changed files with 49 additions and 23 deletions
--- a/roles/base/tasks/firewall.yml
+++ b/roles/base/tasks/firewall.yml
@@ -32,12 +32,14 @@
  ansible.builtin.template:
    src: fail2ban-ssh.conf.j2
    dest: /etc/fail2ban/jail.d/sshd.conf
+    mode: 0640
  notify: restart_fail2ban

 - name: Install Fail2ban IP allow list
  ansible.builtin.template:
    src: fail2ban-allowlist.conf.j2
    dest: /etc/fail2ban/jail.d/allowlist.conf
+    mode: 0640
  when: fail2ban_ignoreip is defined
  notify: restart_fail2ban