playbooks/ansible_playbook_servers
1
0
Fork 0
mirror of https://github.com/DO1JLR/ansible_playbook_servers.git synced 2024-09-14 19:53:56 +02:00
Code Releases Activity

Add fail2ban and firewall

Browse source
This commit is contained in:
L3D 2020-12-31 20:29:38 +01:00
parent 1505e8b26d
commit 5d872471bd
Signed by: l3d
GPG key ID: CD08445BFF4313D1
5 changed files with 18 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
.gitmodules vendored
View file

@ -34,3 +34,9 @@
[submodule "roles/goaccess"] [submodule "roles/goaccess"]
path = roles/goaccess path = roles/goaccess
url = https://github.com/roles-ansible/ansible_role_goaccess.git url = https://github.com/roles-ansible/ansible_role_goaccess.git
[submodule "roles/geerlingguy.firewall"]
path = roles/geerlingguy.firewall
url = https://github.com/geerlingguy/ansible-role-firewall.git
[submodule "roles/robertdebock.fail2ban"]
path = roles/robertdebock.fail2ban
url = https://github.com/robertdebock/ansible-role-fail2ban.git

9
host_vars/web01.l3d.space.yml
View file

@ -32,5 +32,12 @@ nginx_sites:
- name: 'c3woc.cn' - name: 'c3woc.cn'
- name: 'www.c3woc.cn' - name: 'www.c3woc.cn'
acme_notification_email: "acme_{{ inventory_hostname }}@l3d.yt" acme_notification_email: "acme_{{ inventory_hostname }}@l3d.yt"
# firewall
firewall_allowed_tcp_ports:
- "22"
- "25"
- "80"
- "443"
fail2ban_destemail: "fail2ban_notify_{{ inventory_hostname }}@l3d.yt"

1
roles/geerlingguy.firewall Submodule

@ -0,0 +1 @@
Subproject commit adb052a45012227b217555c528f3213659c9f553

1
roles/robertdebock.fail2ban Submodule

@ -0,0 +1 @@
Subproject commit a354bc92a63853b8d16a6292b0d9d629e18c2f95

2
site.yml
View file

@ -14,6 +14,8 @@
- { role: dotfiles, tags: [default,dotfiles]} - { role: dotfiles, tags: [default,dotfiles]}
- { role: ssh_auth, tags: [default,users]} - { role: ssh_auth, tags: [default,users]}
- { role: sshd, tags: [default,users]} - { role: sshd, tags: [default,users]}
- { role: geerlingguy.firewall, tags: [default,firewall], become: true}
- { role: robertdebock.fail2ban, tags: [default,fail2ban], become: true}
- name: deploy web config - name: deploy web config
hosts: web hosts: web