Adding ansible section

2025-05-22 14:43:42 +02:00
parent 8c6e940433
commit 0985d65f86
26 changed files with 900 additions and 0 deletions
--- a/ansible/roles/bastion/templates/sshd.conf.j2
+++ b/ansible/roles/bastion/templates/sshd.conf.j2
@@ -0,0 +1,12 @@
+# {{ ansible_managed }}
+
+[DEFAULT]
+ignoreip = {{ fail2ban_ignore_ips }}
+findtime = 3600
+bantime = 86400
+maxretry = 3
+banaction = nftables-multiport
+banaction_allports = nftables-allports
+
+[sshd]
+enabled = true