瀏覽代碼

Make sure fail2ban is started

Lorenzo Villani 10 年之前
父節點
當前提交
5d1090d488
共有 1 個檔案被更改,包括 3 行新增0 行删除
  1. 3
    0
      roles/common/tasks/security.yml

+ 3
- 0
roles/common/tasks/security.yml 查看文件

13
   copy: src=etc_fail2ban_filter.d_dovecot-pop3imap.conf dest=/etc/fail2ban/filter.d/dovecot-pop3imap.conf
13
   copy: src=etc_fail2ban_filter.d_dovecot-pop3imap.conf dest=/etc/fail2ban/filter.d/dovecot-pop3imap.conf
14
   notify: restart fail2ban
14
   notify: restart fail2ban
15
 
15
 
16
+- name: Ensure fail2ban is started
17
+  service: name=fail2ban state=started
18
+
16
 - name: Update sshd config to disallow root logins
19
 - name: Update sshd config to disallow root logins
17
   lineinfile: dest=/etc/ssh/sshd_config regexp=^PermitRootLogin line="PermitRootLogin no" state=present
20
   lineinfile: dest=/etc/ssh/sshd_config regexp=^PermitRootLogin line="PermitRootLogin no" state=present
18
   notify: restart ssh
21
   notify: restart ssh

Loading…
取消
儲存