diff --git a/roles/fail2ban_rhel/defaults/main.yml b/roles/fail2ban_rhel/defaults/main.yml
index c24adcf..0f673c5 100644
--- a/roles/fail2ban_rhel/defaults/main.yml
+++ b/roles/fail2ban_rhel/defaults/main.yml
@@ -1,13 +1,12 @@
 ---
-fail2ban_rhel_jail_sshd:
-  enabled: true
-  port: ssh
-  findtime: 600
-  maxretry: 5
-  bantime: 3600
-  logpath: "%(sshd_log)s"
-  backend: "%(sshd_backend)s"
-  banaction: firewallcmd-multiport
-  ignoreips:
-    - 127.0.0.1/8
-    - ::1
+fail2ban_rhel_jail_sshd_enabled: true
+fail2ban_rhel_jail_sshd_port: ssh
+fail2ban_rhel_jail_sshd_findtime: 600
+fail2ban_rhel_jail_sshd_maxretry: 5
+fail2ban_rhel_jail_sshd_bantime: 3600
+fail2ban_rhel_jail_sshd_logpath: "%(sshd_log)s"
+fail2ban_rhel_jail_sshd_backend: "%(sshd_backend)s"
+fail2ban_rhel_jail_sshd_banaction: firewallcmd-multiport
+fail2ban_rhel_jail_sshd_ignoreips:
+  - 127.0.0.1/8
+  - ::1
diff --git a/roles/fail2ban_rhel/vars/main.yml b/roles/fail2ban_rhel/vars/main.yml
new file mode 100644
index 0000000..ad0c9d9
--- /dev/null
+++ b/roles/fail2ban_rhel/vars/main.yml
@@ -0,0 +1,10 @@
+fail2ban_rhel_jail_sshd:
+  enabled: "{{ fail2ban_rhel_jail_sshd_enabled }}"
+  port: "{{ fail2ban_rhel_jail_sshd_port }}"
+  findtime: "{{ fail2ban_rhel_jail_sshd_findtime }}"
+  maxretry: "{{ fail2ban_rhel_jail_sshd_maxretry }}"
+  bantime: "{{ fail2ban_rhel_jail_sshd_bantime }}"
+  logpath: "{{ fail2ban_rhel_jail_sshd_logpath }}"
+  backend: "{{ fail2ban_rhel_jail_sshd_backend }}"
+  banaction: "{{ fail2ban_rhel_jail_sshd_banaction }}"
+  ignoreips: "{{ fail2ban_rhel_jail_sshd_ignoreips }}"