148 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jose	54f3f761c8	chore 📦: Remove commented-out code in fail2ban.yml ... This commit removes unnecessary commented-out code from the fail2ban.yml file to clean up and simplify the configuration.	2026-03-01 12:05:48 +01:00
Jose	3054a97d15	chore 📦: Update build scripts for CI/CD pipeline ... Refactored the build scripts to improve compatibility with the latest version of the CI/CD tooling and added new tests for edge cases.	2026-03-01 12:00:48 +01:00
Jose	752db2b57f	style 💎: Fix table formatting and add code block for list_banned task ... This commit addresses the formatting issues in the table and adds a code block for the 'list_banned' task to improve readability and clarity.	2026-03-01 10:52:57 +01:00
Jose	0004d2bd2d	refactor ♻️: Refactor task names and update module references in fail2ban.yml ... This commit refactors the task names and updates module references in the `fail2ban.yml` file to improve clarity and consistency. It also includes minor text adjustments in `meta/fail2ban.md` to enhance readability and ensure accurate variable descriptions with updated default values.	2026-03-01 10:48:13 +01:00
Jose	e44f757b9e	refactor ♻️: Refactor and reformat text for better readability ... This commit refactors the code by improving text formatting and structure to enhance readability, ensuring that the content and functionality remain unchanged.	2026-03-01 10:31:36 +01:00
Jose	94bcbbac5b	docs 📝: Add Fail2Ban deployment and configuration documentation for Proxmox VE ... This commit adds a new file `meta/fail2ban.md` containing detailed documentation on how to deploy and configure Fail2Ban on Proxmox VE, including integration with the Proxmox firewall. The documentation aims to provide comprehensive guidance for users looking to enhance their server security by implementing Fail2Ban.	2026-03-01 10:23:11 +01:00
Jose	bc91383094	chore 📦: Update Fail2ban settings and add/restart/reload tasks ... This commit updates the Fail2ban configuration to reduce bantime and findtime, and adds/fixes restart/reload tasks in handlers/main.yml. These changes aim to improve security and manageability of the fail2ban service.	2026-03-01 10:22:58 +01:00
Jose	7c304765a4	refactor ♻️: Refactor fail2ban.yml for Proxmox cluster detection and configuration ... This commit refactors the fail2ban.yml file to include support for detecting a Proxmox cluster, ensuring that pmxcfs is mounted, installing Fail2Ban, and configuring appropriate jails. This enhances the security and management of the Proxmox environment by automating the setup and monitoring of failed login attempts.	2026-03-01 10:22:41 +01:00
Jose	9e90c67fe8	refactor ♻️: Refactor fail2ban.yml to use fw_compile_check.rc for failure checks ... This refactoring updates the fail2ban configuration to utilize a new script, `fw_compile_check.rc`, for handling failure checks. This change aims to streamline the process and improve reliability by centralizing the logic in a dedicated script.	2026-02-25 17:59:13 +01:00
Jose	734a9c031f	style 💎: Fix indentation and variable registration in fail2ban.yml ... Refactored the YAML file to improve readability and ensure proper variable registration.	2026-02-25 17:52:11 +01:00
Jose	46cac8fc90	fix 🐛: Fix typo in firewall path variable ... Corrected a typographical error in the firewall path variable to ensure proper configuration and functionality.	2026-02-25 17:39:13 +01:00
Jose	fcbe78f3e5	feat ✨: Add task for importing fail2ban configuration ... This commit introduces a new task that facilitates the import of fail2ban configuration files into the system. This enhancement allows for automated and consistent management of security settings, improving the overall security posture.	2026-02-25 17:33:39 +01:00
Jose	13b3a5066d	refactor ♻️: Refactor task to extract and process Corosync ring addresses, determine their CIDRs, and update ignoreip in fail2ban config ... This refactoring extracts the logic for processing Corosync ring addresses and determining their CIDRs. It then updates the `ignoreip` setting in the fail2ban configuration accordingly. This change improves modularity and maintainability of the code.	2026-02-24 19:18:48 +01:00
Jose	79e14e7120	feat ✨: Add IPSET registration and conditional validation for Proxmox firewall configuration ... This commit introduces new features to register IPSETs and update firewall reload notifications. It also conditionally validates Proxmox firewall configurations based on changes, enhancing the robustness of the system.	2026-02-24 19:02:24 +01:00
Jose	4107a3a953	refactor ♻️: Rename task 'Validate Proxmox firewall configuration' to 'fail2ban | Validate Proxmox firewall configuration' ... Refactored the task name to include 'fail2ban' for clarity and consistency with other similar tasks.	2026-02-24 18:57:44 +01:00
Jose	8a3f359f46	style 💎: Remove unnecessary blank line from fail2ban.yml ... This commit removes an unnecessary blank line from the `fail2ban.yml` file to clean up the code style and improve readability.	2026-02-24 18:56:47 +01:00
Jose	674f014be3	feat ✨: Add conditional execution for reloading PVE firewall ... This commit introduces a new feature that allows conditional execution of the PVE firewall reload command based on certain conditions, enhancing flexibility and control over firewall management.	2026-02-24 18:56:02 +01:00
Jose	432ec97292	chore 📦: Update build scripts for CI/CD pipeline ... Updated the build scripts to ensure compatibility with the latest version of the CI/CD tooling and improved the deployment process.	2026-02-24 18:47:08 +01:00
Jose	80b3b82bf6	refactor ♻️: Refactor fail2ban tasks for better IPSet management ... This refactoring removes redundant 'blockinfile' and 'reload' commands in fail2ban tasks, ensuring that IPSet and drop rules are correctly placed. A new handler has been added to reload the PVE firewall after a fail2ban restart.	2026-02-24 18:46:12 +01:00
Jose	a120b1042b	chore 📦: Add comment to disable risky file permissions check ... This commit adds a comment in the codebase to disable a file permissions check that was deemed too risky. This change aims to simplify the build process while ensuring that we are aware of the potential security implications.	2026-02-24 18:25:03 +01:00
Jose	e26b3f01f8	chore 📦: Remove redundant directory creation and update shell command for robustness ... This commit removes unnecessary directory creation steps in the build process, simplifying the setup. Additionally, it updates the shell command to be more robust and reliable.	2026-02-24 18:21:50 +01:00
Jose	8d40abc15b	style 💎: Remove trailing whitespace from f2b_unban_ip comment ... Cleaned up the code by removing unnecessary trailing whitespace from a comment in the defaults/main.yml file.	2026-02-23 19:37:50 +01:00
Jose	d3527c14e4	docs 📝: Add Fail2Ban integration tasks to README and directory structure. ... Updated the README with instructions on integrating Fail2Ban and modified the directory structure to accommodate new files related to this integration.	2026-02-23 19:36:36 +01:00
Jose	3afa853d09	feat ✨: Add new variable f2b_unban_ip for specifying an IP to unban during playbook execution. ... Introduce a new variable `f2b_unban_ip` in the Ansible playbook to allow users to specify an IP address that should be unbanned using Fail2Ban. This feature enhances the flexibility of the playbook by enabling targeted IP management.	2026-02-23 18:35:10 +01:00
Jose	4fa35ca62d	feat ✨: Add Fail2ban integration with Proxmox Firewall ... This commit adds Fail2ban settings to `defaults/main.yml`, a new task to restart the fail2ban service, and a task file for deploying Fail2Ban integrated with Proxmox Firewall. The new tasks include checks, validations, and configuration to enhance security by blocking malicious IP addresses.	2026-02-23 18:30:01 +01:00
Jose	eb548e8476	feat ✨: Add new task to stop log2ram before extracting it ... Introduce a new step in the extraction process to ensure that log2ram is stopped before proceeding with the extraction, preventing potential data corruption or loss.	2026-02-16 20:52:32 +01:00
Jose	954bd185f5	refactor ♻️: Reduce log2ram RAM allocation from 10% to 5% ... Optimized memory usage by halving the RAM allocation for log2ram, improving system performance and resource efficiency.	2026-02-16 19:29:11 +01:00
Jose	6e44de23e9	chore 📦: Update log2ram version to 1.7.2 and add dynamic versioning in ram.yml ... This commit updates the log2ram version to 1.7.2 and introduces dynamic versioning in the `ram.yml` file. This ensures that the log2ram version is always up-to-date with the latest release.	2026-02-16 18:48:47 +01:00
Jose	06834ae66b	chore 📦: Update log2ram URL to use a specific tag ... This commit updates the URL for log2ram to point to a specific tag rather than using the master branch. This ensures that we are always using a stable version of the software.	2026-02-16 18:26:33 +01:00
Jose	d10d80803b	feat ✨: Add variable log2ram_host_memtotal_mb for storing host memory total in MB ... Introduce a new variable to store the total memory of the host in megabytes, enhancing memory management and resource allocation within the system.	2026-02-16 17:57:09 +01:00
Jose	bbb133a0a5	refactor ♻️: Refactor log2ram size calculation for integer values and improve readability ... This refactoring ensures that the log2ram size calculation always results in an integer value, enhancing precision. Additionally, it improves code readability by simplifying complex expressions.	2026-02-15 18:43:12 +01:00
Jose	d7d078c5aa	Merge pull request 'refactor ♻️: Refactor task naming to include role context' (#36) from dev into main ... Reviewed-on: #36	2026-02-15 18:23:53 +01:00
Jose	63b5215e8a	refactor ♻️: Refactor task naming to include role context ... Updated task names to explicitly include the role context, improving clarity and consistency across the system.	2026-02-15 18:22:14 +01:00
Jose	e347af8569	feat ✨: Add new task to gather memory facts and update RAM calculation ... This commit introduces a new feature that adds a task specifically designed to gather memory-related facts. Additionally, it updates the RAM calculation logic to ensure accuracy based on the newly gathered data.	2026-02-15 18:18:57 +01:00
Jose	e965fcaf7f	Merge pull request 'refactor ♻️: Refactor memory calculation logic' (#35) from dev into main ... Reviewed-on: #35	2026-02-15 17:40:30 +01:00
Jose	23376f81f7	refactor ♻️: Refactor memory calculation logic ... Removed unused variable and updated memory calculation to use ansible_memtotal_mb for more accurate results.	2026-02-15 17:37:36 +01:00
Jose	f7e31bb215	Merge pull request 'refactor ♻️: Refactor memory variables and calculations' (#32) from dev into main ... Reviewed-on: #32	2026-02-15 12:50:05 +01:00
Jose	c3327cd681	refactor ♻️: Refactor memory variables and calculations ... Renamed `_total_ram_mb` to `log2ram_host_memtotal_mb` and updated the calculation accordingly. Updated variable names for memory checks in swap task.	2026-02-15 12:45:26 +01:00
Jose	a94c87f093	Merge pull request 'refactor ♻️: Move and Rename 'Reload Systemd' Task' (#31) from dev into main ... Reviewed-on: #31	2026-02-15 12:12:46 +01:00
Jose	8af5d2f806	refactor ♻️: Move and Rename 'Reload Systemd' Task ... Repositioned the 'Reload Systemd' task to a more appropriate location and renamed it for clarity.	2026-02-15 12:10:09 +01:00
Jose	e774265fb4	Merge pull request 'feat ✨: Add configuration options for log2ram and journald settings' (#30) from dev into main ... Reviewed-on: #30	2026-02-15 09:48:02 +01:00
Jose	061f26aad5	refactor ♻️: Rename task 'Configure log2ram settings' to 'ram | Configure log2ram settings' ... Refactored the task name to include the 'ram' prefix for better clarity and consistency.	2026-02-15 09:43:16 +01:00
Jose	7c664dfd45	refactor ♻️: Refactor installation logic and configure settings using loops ... This refactoring simplifies the installation process by utilizing loops to handle repetitive tasks, improving readability and maintainability of the code.	2026-02-15 09:42:00 +01:00
Jose	83febca09a	refactor ♻️: Refactor task structure and update configuration method in ram.yml ... This commit refactors the task structure in `ram.yml` and updates the configuration method to improve readability and maintainability.	2026-02-15 09:27:03 +01:00
Jose	6aaa186c1f	feat ✨: Add configuration options for log2ram and journald settings ... This commit introduces new features that allow users to configure log2ram and journald settings. It includes handlers for log2ram, journald, and a task to configure RAM usage. Additionally, a new role is added for installing and configuring log2ram on Debian systems.	2026-02-15 09:13:08 +01:00
Jose	91cdcf6136	Merge pull request 'feat ✨: Add task to configure kernel panic behavior and auto-reboot' (#29) from dev into main ... Reviewed-on: #29	2026-02-15 08:41:04 +01:00
Jose	775d996911	refactor ♻️: Rename task from 'kernel panic auto-reboot' to 'Configure kernel panic auto-reboot' ... Refactored the task name to improve clarity and consistency. This change enhances readability and makes it easier for developers to understand the purpose of the task.	2026-02-15 08:37:46 +01:00
Jose	4ea7833055	refactor ♻️: Refactor kernel panic configuration with ansible.posix.sysctl for better management and readability ... This refactoring involves updating the kernel panic configuration management to utilize the `ansible.posix.sysctl` module. This change enhances the clarity and maintainability of the code by providing a more structured approach to handling system settings.	2026-02-15 08:36:22 +01:00
Jose	059ea94842	feat ✨: Add task to configure kernel panic behavior and auto-reboot ... This commit introduces two new tasks in the `kernel.yml` file: one to configure the kernel panic behavior and another for enabling automatic reboot on kernel panic. These enhancements improve system reliability by ensuring that the system can recover from critical errors more effectively.	2026-02-15 08:30:32 +01:00
Jose	5ceecd56f4	Merge pull request 'feat ✨: Setup APT translations and use IPv4' (#28) from dev into main ... Reviewed-on: #28	2026-02-15 08:25:55 +01:00