feat: add fail2ban integration

Add fail2ban role to the common configuration playbook for improved server security. Using the oefenweb.fail2ban role from Ansible Galaxy to handle brute force attack prevention.
openfoodfacts · Nov 23, 2024 · 4d0bd12 · 4d0bd12
1 parent 86ccb6c
commit 4d0bd12
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/.gitignore b/.gitignore
@@ -2,6 +2,7 @@
 .vagrant/
 collections/
 roles/willshersystems.sshd/
+roles/oefenweb.fail2ban/
 
 # Byte-compiled / optimized / DLL files
 __pycache__/

diff --git a/jobs/configure.yml b/jobs/configure.yml
@@ -8,9 +8,9 @@
       tags: base
     - role: sshd
       tags: ssh
+    - role: oefenweb.fail2ban
+      tags: fail2ban
 # TODO
-#    - role: fail2ban
-#      tags: fail2ban
 #    - role: nullmailer
 #      tags: mail
 #    - role: munin-node

diff --git a/requirements.yml b/requirements.yml
@@ -9,3 +9,5 @@ collections:
 roles:
   - src: willshersystems.sshd
     version: v0.25.0
+  - src: oefenweb.fail2ban
+    version: v4.0.10