diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2020-05-16 02:52:55 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2020-05-16 05:45:59 +0200 |
| commit | bac7811d2b35252b7a83a45d75bb344b4b1776a9 (patch) | |
| tree | 02176a15d570cab6dbd55b52b6df5c7b7b0538b1 /roles/common/tasks/fail2ban.yml | |
| parent | c4f24043baeccc95556fb9c3c032505ecadb5fbd (diff) | |
Upgrade baseline to Debian 10.
Diffstat (limited to 'roles/common/tasks/fail2ban.yml')
| -rw-r--r-- | roles/common/tasks/fail2ban.yml | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/roles/common/tasks/fail2ban.yml b/roles/common/tasks/fail2ban.yml index 89427ea..e56deaf 100644 --- a/roles/common/tasks/fail2ban.yml +++ b/roles/common/tasks/fail2ban.yml @@ -36,44 +36,44 @@ - Restart fail2ban - name: Configure fail2ban (action.d/nftables-allports.local) copy: src=etc/fail2ban/action.d/nftables-allports.local dest=/etc/fail2ban/action.d/nftables-allports.local owner=root group=root mode=0644 register: r3 notify: - Restart fail2ban - name: Copy filters copy: src=etc/fail2ban/filter.d/ dest=/etc/fail2ban/filter.d/ owner=root group=root mode=0644 register: r4 notify: - Restart fail2ban -- name: Create directory /etc/systemd/system/fail2ban.service.d/override.conf +- name: Create directory /etc/systemd/system/fail2ban.service.d file: path=/etc/systemd/system/fail2ban.service.d state=directory owner=root group=root - mode=0750 + mode=0755 - name: Harden fail2ban.service copy: src=etc/systemd/system/fail2ban.service.d/override.conf dest=/etc/systemd/system/fail2ban.service.d/override.conf owner=root group=root mode=0644 register: r5 notify: - systemctl daemon-reload - Restart fail2ban - name: Start fail2ban service: name=fail2ban state=started when: not (r1.changed or r2.changed or r3.changed or r4.changed or r5.changed) - meta: flush_handlers - name: Delete /var/lib/fail2ban/fail2ban.sqlite3 file: path=/var/lib/fail2ban/fail2ban.sqlite3 state=absent |