From d15ee52a4972c3132528d68902aa1bf410593d32 Mon Sep 17 00:00:00 2001
From: Alexandre Pires <c.alexandre.pires@gmail.com>
Date: Thu, 24 Apr 2025 22:24:13 +0200
Subject: [PATCH] Add Fail2Ban configuration for Postfix and create playbooks
 for Duo Security and GeoIP roles

---
 ansible/host_vars/prod-01.alexpires.me.yml | 12 +++++++++---
 ansible/playbook_duo_security.yml          | 10 ++++++++++
 ansible/playbook_geoip.yml                 | 10 ++++++++++
 3 files changed, 29 insertions(+), 3 deletions(-)
 create mode 100644 ansible/playbook_duo_security.yml
 create mode 100644 ansible/playbook_geoip.yml

diff --git a/ansible/host_vars/prod-01.alexpires.me.yml b/ansible/host_vars/prod-01.alexpires.me.yml
index 484e353..d480c34 100644
--- a/ansible/host_vars/prod-01.alexpires.me.yml
+++ b/ansible/host_vars/prod-01.alexpires.me.yml
@@ -96,11 +96,17 @@ fail2ban_jails:
   postfix:
     enabled: true
     port: "smtp,ssmtp"
-    filter: "postfix"
+    filter: "postfix-k8s"
     logpath: "/var/log/postfix/current"
     maxretry: 3
-    findtime: 600
-    bantime: 3600
+    findtime: 18000
+    bantime: -1
+
+fail2ban_filters:
+  postfix-k8s:
+    Definition:
+      failregex: "^.*?postfix/smtps/smtpd\\[\\d+\\]:.*\\[<HOST>\\]: SASL ((?i)LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed.*$"
+      ignoreregex: ""
 
 # aide
 install_aide: true
diff --git a/ansible/playbook_duo_security.yml b/ansible/playbook_duo_security.yml
new file mode 100644
index 0000000..522cf5b
--- /dev/null
+++ b/ansible/playbook_duo_security.yml
@@ -0,0 +1,10 @@
+---
+- name: Duo Security 
+  hosts: linux
+  gather_facts: true
+
+  roles:
+    - role: "duo"
+      tags:
+        - roles
+        - roles::duosecurity
diff --git a/ansible/playbook_geoip.yml b/ansible/playbook_geoip.yml
new file mode 100644
index 0000000..e701c73
--- /dev/null
+++ b/ansible/playbook_geoip.yml
@@ -0,0 +1,10 @@
+---
+- name: Fail2Ban
+  hosts: linux
+  gather_facts: true
+
+  roles:
+    - role: "geoip"
+      tags:
+        - roles
+        - roles::geoip