Jose
80b3b82bf6
This refactoring removes redundant 'blockinfile' and 'reload' commands in fail2ban tasks, ensuring that IPSet and drop rules are correctly placed. A new handler has been added to reload the PVE firewall after a fail2ban restart.
42 lines
841 B
YAML
42 lines
841 B
YAML
---
|
|
# ansible_role_proxmox_provision/handlers/main.yml
|
|
# Handlers for role
|
|
# ==================
|
|
- name: Run apt update
|
|
ansible.builtin.apt:
|
|
update_cache: yes
|
|
|
|
- name: Restart pveproxy
|
|
ansible.builtin.systemd:
|
|
name: pveproxy
|
|
state: restarted
|
|
|
|
- name: Restart logrotate
|
|
ansible.builtin.service:
|
|
name: logrotate
|
|
state: restarted
|
|
become: true
|
|
|
|
- name: Restart log2ram
|
|
ansible.builtin.systemd:
|
|
name: log2ram
|
|
state: restarted
|
|
enabled: yes
|
|
|
|
- name: Restart journald
|
|
ansible.builtin.systemd:
|
|
name: systemd-journald
|
|
state: restarted
|
|
|
|
- name: Reload systemd
|
|
ansible.builtin.systemd:
|
|
daemon_reload: true
|
|
|
|
- name: Restart fail2ban
|
|
ansible.builtin.systemd:
|
|
name: fail2ban
|
|
state: restarted
|
|
|
|
- name: Reload pve firewall
|
|
ansible.builtin.command: pve-firewall reload
|
|
changed_when: false |