infrastructure/roles/fail2ban/templates/fail2ban.local.j2

{{ ansible_managed | comment }}

[Definition]
logtarget = /var/log/fail2ban/fail2ban.log
fail2ban: Harden service This hardens the fail2ban service by giving it only the capabilities and read/write access it needs. This is done in accordance to the Arch Wiki article [1] where further information about the needed capabilities and read/write paths can be found. [1] https://wiki.archlinux.org/title/Fail2ban#Service_hardening 2021-12-05 14:22:51 +01:00			`{{ ansible_managed \| comment }}`

			`[Definition]`
			`logtarget = /var/log/fail2ban/fail2ban.log`