w3bservice / ansible-role-fail2ban-firewalld

Ansible role to install fail2ban with firewalld

ansible-role-fail2ban-firewalld

Ansible role to install fail2ban with firewalld on CentOS 7

Requirements

• Ansible 2.3+
• CentOS 7
• Extra Packages for Enterprise Linux (EPEL) repository
• Remi's RPM (REMI) repository

Installation

1. Fork this repository
2. git submodule add roles/ansible-role-fail2ban-firewalld
   • submodule reference

Ansible Galaxy: HauptJ.ansible-role-fail2ban-firewalld

Variables

Fail2ban Firewalld

Name	Default	Description
f2b_whitelist_ip	8.8.8.8	IP to whitelist
f2b_destmail	[email protected]	Email to send reports to
f2b_sender	[email protected]	Email to send reports from
cf_email	[email protected]	CloudFlare account Email
cf_key	key	CloudFlare account API key
f2b_bantime	3600	IP ban duration in sec
f2b_findtime	600	time period to count retries in sec
f2b_maxretry	5	Amount of failed attempts in f2b_findtime before ban
open_ports	80/tcp, 443/tcp	Ports to open
close_ports	80/tcp, 443/tcp	Ports to close