roles/debian-base/tasks/fail2ban.yml

@@ -10,6 +10,7 @@
     group: root
     mode: u=rw,g=r,o=r
   notify: restart fail2ban
+  register: jail
 - name: Ensure file for auth sshd custom log exists
   file:
     path: /var/log/auth.log
@@ -17,3 +18,4 @@
     owner: root
     group: adm
     mode: u=rw,g=r,o=
+  when: jail.changed