Initial ansible onboard

ansible/roles/fail2ban/vars/main.yml

@@ -0,0 +1,3 @@
+---
+
+# Main vars file for fail2ban role

ansible/roles/fail2ban/vars/os_distribution/debian/jessie.yml

@@ -0,0 +1,13 @@
+---
+
+# Debian Jessie specific configuration
+
+_fail2ban_main_config_content:
+  - option: 'loglevel'
+    value: 3
+  - option: 'logtarget'
+    value: '/var/log/fail2ban.log'
+  - option: 'socket'
+    value: '/var/run/fail2ban/fail2ban.sock'
+  - option: 'pidfile'
+    value: '/var/run/fail2ban/fail2ban.pid'

ansible/roles/fail2ban/vars/os_distribution/ubuntu/trusty.yml

@@ -0,0 +1,13 @@
+---
+
+# Ubuntu Trusty specific variables
+
+_fail2ban_main_config_content:
+  - option: 'loglevel'
+    value: 3
+  - option: 'logtarget'
+    value: '/var/log/fail2ban.log'
+  - option: 'socket'
+    value: '/var/run/fail2ban/fail2ban.sock'
+  - option: 'pidfile'
+    value: '/var/run/fail2ban/fail2ban.pid'

ansible/roles/fail2ban/vars/os_distribution/ubuntu/xenial.yml

@@ -0,0 +1,34 @@
+---
+
+# Specific Xenial vars
+# =============================================================================
+
+# Main configuration
+# -----------------------------------------------------------------------------
+_fail2ban_main_config_content:
+  - option: 'loglevel'
+    value: 'INFO'
+  - option: 'logtarget'
+    value: '/var/log/fail2ban.log'
+  - option: 'syslogsocket'
+    value: 'auto'
+  - option: 'socket'
+    value: '/var/run/fail2ban/fail2ban.sock'
+  - option: 'pidfile'
+    value: '/var/run/fail2ban/fail2ban.pid'
+  - option: 'dbfile'
+    value: '/var/lib/fail2ban/fail2ban.sqlite3'
+  - option: 'dbpurgeage'
+    value: 86400
+
+
+# Jails configuration
+# -----------------------------------------------------------------------------
+_fail2ban_jails:
+  sshd:
+    enabled: true
+    port: 'ssh'
+    filter: 'sshd'
+    logpath: '/var/log/auth.log'
+    maxretry: 3
+    findtime: 600

ansible/roles/fail2ban/vars/os_family/debian.yml

@@ -0,0 +1,43 @@
+---
+
+# Debian OS family specific vars
+# =============================================================================
+
+# Package variables
+# -----------------------------------------------------------------------------
+_fail2ban_packages:
+  - name: 'fail2ban'
+
+
+# Service variables
+# -----------------------------------------------------------------------------
+_fail2ban_service_name: 'fail2ban'
+
+
+# Main configuration
+# -----------------------------------------------------------------------------
+_fail2ban_main_config_content:
+  - option: 'loglevel'
+    value: 3
+  - option: 'logtarget'
+    value: '/var/log/fail2ban.log'
+  - option: 'syslog-target'
+    value: '/var/log/fail2ban.log'
+  - option: 'syslog-facility'
+    value: 1
+  - option: 'socket'
+    value: '/var/run/fail2ban/fail2ban.sock'
+  - option: 'pidfile'
+    value: '/var/run/fail2ban/fail2ban.pid'
+
+
+# Jails configuration
+# -----------------------------------------------------------------------------
+_fail2ban_jails:
+  ssh:
+    enabled: true
+    port: 'ssh'
+    filter: 'sshd'
+    logpath: '/var/log/auth.log'
+    maxretry: 3
+    findtime: 600

ansible/roles/fail2ban/vars/os_family/redhat.yml

@@ -0,0 +1,43 @@
+---
+
+# RedHat OS family specific vars
+# =============================================================================
+
+# Package variables
+# -----------------------------------------------------------------------------
+_fail2ban_packages:
+  - name: 'fail2ban'
+
+
+# Service variables
+# -----------------------------------------------------------------------------
+_fail2ban_service_name: 'fail2ban'
+
+
+# Main configuration
+# -----------------------------------------------------------------------------
+_fail2ban_main_config_content:
+  - option: 'loglevel'
+    value: 3
+  - option: 'logtarget'
+    value: '/var/log/fail2ban.log'
+  - option: 'syslog-target'
+    value: '/var/log/fail2ban.log'
+  - option: 'syslog-facility'
+    value: 1
+  - option: 'socket'
+    value: '/var/run/fail2ban/fail2ban.sock'
+  - option: 'pidfile'
+    value: '/var/run/fail2ban/fail2ban.pid'
+
+
+# Jails configuration
+# -----------------------------------------------------------------------------
+_fail2ban_jails:
+  ssh:
+    enabled: true
+    port: 'ssh'
+    filter: 'sshd'
+    logpath: '/var/log/auth.log'
+    maxretry: 3
+    findtime: 600