This commit adds Fail2ban settings to `defaults/main.yml`, a new task to restart the fail2ban service, and a task file for deploying Fail2Ban integrated with Proxmox Firewall. The new tasks include checks, validations, and configuration to enhance security by blocking malicious IP addresses.
38 lines
743 B
YAML
38 lines
743 B
YAML
---
|
|
# ansible_role_proxmox_provision/handlers/main.yml
|
|
# Handlers for role
|
|
# ==================
|
|
- name: Run apt update
|
|
ansible.builtin.apt:
|
|
update_cache: yes
|
|
|
|
- name: Restart pveproxy
|
|
ansible.builtin.systemd:
|
|
name: pveproxy
|
|
state: restarted
|
|
|
|
- name: Restart logrotate
|
|
ansible.builtin.service:
|
|
name: logrotate
|
|
state: restarted
|
|
become: true
|
|
|
|
- name: Restart log2ram
|
|
ansible.builtin.systemd:
|
|
name: log2ram
|
|
state: restarted
|
|
enabled: yes
|
|
|
|
- name: Restart journald
|
|
ansible.builtin.systemd:
|
|
name: systemd-journald
|
|
state: restarted
|
|
|
|
- name: Reload systemd
|
|
ansible.builtin.systemd:
|
|
daemon_reload: true
|
|
|
|
- name: Restart fail2ban
|
|
ansible.builtin.systemd:
|
|
name: fail2ban
|
|
state: restarted |