various fixed

2026-07-04 22:54:09 +02:00
parent 6873ef44e4
commit 59aa8a7bcf
7 changed files with 27 additions and 10 deletions
@@ -8,6 +8,11 @@
        name: fail2ban
        state: present

+    - name: Install sudo
+      ansible.builtin.apt:
+        name: sudo
+        state: present
+
    - name: Create user
      ansible.builtin.user:
        name: fail2forward
@@ -38,6 +43,16 @@
        group: root
        mode: '0755'

+    - name: Allow fail2forward to run fail2ban-client
+      ansible.builtin.copy:
+        content: |
+          fail2forward ALL=(root) NOPASSWD: /usr/bin/fail2ban-client set sshd banip *, /usr/bin/fail2ban-client set sshd unbanip *
+        dest: /etc/sudoers.d/fail2forward
+        owner: root
+        group: root
+        mode: '0440'
+        validate: /usr/sbin/visudo -cf %s
+
    - name: Copy jail.local
      ansible.builtin.template:
        src: jail.local.j2