Install Fail2ban IP allow list

2022-06-28 23:43:58 -04:00
parent 8362230eb4
commit 9eefad0e87
2 changed files with 9 additions and 0 deletions
--- a/roles/base/tasks/firewall.yml
+++ b/roles/base/tasks/firewall.yml
@@ -34,6 +34,13 @@
    dest: /etc/fail2ban/jail.d/sshd.conf
  notify: restart_fail2ban

+- name: Install Fail2ban IP allow list
+  template:
+    src: fail2ban-allowlist.conf.j2
+    dest: /etc/fail2ban/jail.d/allowlist.conf
+  when: fail2ban_ignoreip is defined
+  notify: restart_fail2ban
+
 - name: Enable firewall
  ufw:
    state: enabled