|
|
|
|
13
|
copy: src=etc_fail2ban_filter.d_dovecot-pop3imap.conf dest=/etc/fail2ban/filter.d/dovecot-pop3imap.conf
|
13
|
copy: src=etc_fail2ban_filter.d_dovecot-pop3imap.conf dest=/etc/fail2ban/filter.d/dovecot-pop3imap.conf
|
14
|
notify: restart fail2ban
|
14
|
notify: restart fail2ban
|
15
|
|
15
|
|
|
|
16
|
+- name: Ensure fail2ban is started
|
|
|
17
|
+ service: name=fail2ban state=started
|
|
|
18
|
+
|
16
|
- name: Update sshd config to disallow root logins
|
19
|
- name: Update sshd config to disallow root logins
|
17
|
lineinfile: dest=/etc/ssh/sshd_config regexp=^PermitRootLogin line="PermitRootLogin no" state=present
|
20
|
lineinfile: dest=/etc/ssh/sshd_config regexp=^PermitRootLogin line="PermitRootLogin no" state=present
|
18
|
notify: restart ssh
|
21
|
notify: restart ssh
|