Add Fail2Ban configuration for Postfix and create playbooks for Duo Security and GeoIP roles

ansible/host_vars/prod-01.alexpires.me.yml

@@ -96,11 +96,17 @@ fail2ban_jails:
   postfix:
     enabled: true
     port: "smtp,ssmtp"
-    filter: "postfix"
+    filter: "postfix-k8s"
     logpath: "/var/log/postfix/current"
     maxretry: 3
-    findtime: 600
+    findtime: 18000
-    bantime: 3600
+    bantime: -1
+
+fail2ban_filters:
+  postfix-k8s:
+    Definition:
+      failregex: "^.*?postfix/smtps/smtpd\\[\\d+\\]:.*\\[<HOST>\\]: SASL ((?i)LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed.*$"
+      ignoreregex: ""
 
 # aide
 install_aide: true

ansible/playbook_duo_security.yml

@@ -0,0 +1,10 @@
+---
+- name: Duo Security 
+  hosts: linux
+  gather_facts: true
+
+  roles:
+    - role: "duo"
+      tags:
+        - roles
+        - roles::duosecurity

ansible/playbook_geoip.yml

@@ -0,0 +1,10 @@
+---
+- name: Fail2Ban
+  hosts: linux
+  gather_facts: true
+
+  roles:
+    - role: "geoip"
+      tags:
+        - roles
+        - roles::geoip