ansible-playbooks/roles/fail2ban/handlers/main.yml at 120615c38fe2a6b1c28554827d31ef5d1e99cdec - ansible-playbooks - Jokestea

jokester/ansible-playbooks

Files

T

Clément Désiles 120615c38f fix(fail2ban): start under ProtectSystem=strict hardening

- log to journald via fail2ban.local (logtarget is a fail2ban.conf option,
  not jail.local) so the server can start without /var/log write access
- create the socket dir via RuntimeDirectory=fail2ban instead of a
  non-creating ReadWritePaths entry
- add ufw write paths so bans persist under the read-only namespace
- manage override.conf unconditionally and restart on change

2026-09-05 16:21:49 +02:00

7 lines

120 B

YAML

Raw Blame History

 ---
 - name: Restart fail2ban
   ansible.builtin.systemd:
     name: fail2ban
     daemon_reload: true
     state: restarted