Prototype a role for installing fail2ban on RHEL 9+

2026-06-08 20:05:29 +04:00
parent fad0cb0abb
commit deaeb1f79e
9 changed files with 178 additions and 0 deletions
--- a/roles/fail2ban_rhel/defaults/main.yml
+++ b/roles/fail2ban_rhel/defaults/main.yml
@@ -0,0 +1,13 @@
+---
+fail2ban_rhel_jail_sshd:
+  enabled: true
+  port: ssh
+  findtime: 600
+  maxretry: 5
+  bantime: 3600
+  logpath: "%(sshd_log)s"
+  backend: "%(sshd_backend)s"
+  banaction: firewallcmd-multiport
+  ignoreips:
+    - 127.0.0.1/8
+    - ::1