configurations-ansible/roles/fail2ban-basic/tasks/main.yml

---
# tasks file for fail2ban-basic
#
- name: Fail2ban Configuration
  when:
    - fail2ban_enabled is true
    - "'global.update_only' not in ansible_run_tags"
  block:
    - name: Install Fail2ban
      ansible.builtin.package:
        name: "{{ fail2ban_package_name_by_os_family[ansible_os_family] }}"

    - name: Enable Fail2ban service
      when: "is_docker is not true"
      ansible.builtin.systemd:
        name: fail2ban
        enabled: yes
        state: started
        masked: no