- name: Install security-related packages apt: pkg=$item state=installed with_items: - fail2ban - rkhunter - lynis - name: Copy fail2ban configuration files into place copy: src=etc_fail2ban_filter.d_dovecot-pop3imap.conf dest=/etc/fail2ban/filter.d/dovecot-pop3imap.conf - template: src=etc_fail2ban_jail.local.j2 dest=/etc/fail2ban/jail.local notify: restart fail2ban