test

linux/base-config-debian/config-fail2ban.yaml

@@ -6,38 +6,33 @@
   gather_facts: yes
 
   tasks:
+  
+    - name: set variables
+      set_fact:
+        bantime: "10m"
+        maxretry: "10"
+        findtime: "10m"
+        jails:
+          - name: sshd
+            enabled: true
+            filter: sshd
+            logpath: /var/log/lastlog
+            port: ['ssh', '22']
+            maxretry: 10
+            bantime: 10m
+            findtime: 10m
+          - name: asterisk
+            enabled: true
+            filter: asterisk
+            logpath: /var/log/asterisk/messages
+            port: ['asterisk', '5060']
+            maxretry: 10
+            bantime: 10m
+            findtime: 10m
 
     - name: "[CONFIG FAIL2BAN] Install and configure fail2ban service"
       import_role:
         name: config-fail2ban
-      vars:
-        bantime: '10m'
-        maxretry: '10'
-        findtime: '10m'
-        jail.name:
-          - 'sshd'
-          - 'dns'
-        jail.enabled:
-          - 'true'
-          - 'true'
-        jail.filter:
-          - 'sshd'
-          - 'asterisk'
-        jail.logpath:
-          - '/var/log/lastlog'
-          - '/var/log/asterisk/messages'
-        jail.port:
-          - '22'
-          - '5060'
-        jail.maxretry:
-          - '10'
-          - '10'
-        jail.bantime:
-          - '10m'
-          - '10m'
-        jail.findtime:
-          - '10m'
-          - '10m'
 
         #In this template: