roles/debian-base/handlers/main.yml

@@ -6,7 +6,7 @@
   systemd:
     name: ssh
     state: restarted
-- name: restart-fail2ban
+- name: restart fail2ban
   systemd:
     name: fail2ban
     state: restarted

roles/debian-base/tasks/fail2ban.yml

@@ -9,4 +9,11 @@
     owner: root
     group: root
     mode: u=rw,g=r,o=r
-  notify: restart-fail2ban
+  notify: restart fail2ban
+- name: Ensure file for auth sshd custom log exists
+  file:
+    path: /var/log/auth.log
+    state: touch
+    owner: root
+    group: adm
+    mode: u=rw,g=r,o=

roles/debian-base/templates/jail.local

@@ -18,4 +18,4 @@ enabled   = true
 port      = 0:65535
 filter    = sshd
 logpath   = {{ fail2ban.logpath }}
-action    = %(action_mwl)s
+action    = %(action_mwl)s