histalek
d822f8544d
This hardens the fail2ban service by giving it only the capabilities and read/write access it needs. This is done in accordance to the Arch Wiki article [1] where further information about the needed capabilities and read/write paths can be found. [1] https://wiki.archlinux.org/title/Fail2ban#Service_hardening |
||
---|---|---|
.. | ||
defaults | ||
handlers | ||
meta | ||
tasks | ||
templates | ||
README.md |
fail2ban
This will install and configure the fail2ban
package and by default enable the ssh jail.
Requirements
CentOS: You will need to have the EPEL repository enabled (eg. by installing the epel-release
package).
Role Variables
Please look at the defaults/main.yml for all available variables and their description.
Note: Lines that are commented out via #
are usually still valid/used variables, but they are not defined by default, so they might enable a feature, when uncommenting/defining them!
Dependencies
- (CentOS only) epel
License
GPL-3.0-only