Default ban time is way too cool for me.

2020-11-07 10:34:03 +01:00 · 2020-11-07 10:34:03 +01:00 · 80a3475a21
commit 80a3475a21
parent 4df3c78775
1 changed files with 9 additions and 1 deletions
--- a/common.yml
+++ b/common.yml
@ -22,7 +22,7 @@
        name: fail2ban
        state: present

-    - name: Configure fail2ban
+    - name: Configure fail2ban for nginx
      copy:
        content: |
          [nginx-botsearch]
@ -34,6 +34,14 @@
        mode: 0x644
      notify: reload fail2ban

+    - name: Configure fail2ban bantime
+      copy:
+        content: |
+          [DEFAULT]
+          bantime  = 30d
+        dest: /etc/fail2ban/jail.d/mdk-bantime.conf
+        mode: 0x644
+      notify: reload fail2ban

    - name: Setup nftables
      include_role: name=nftables