---
# tasks file for fail2ban-basic

- ansible.builtin.debug:
    msg: "ENABLED = {{ fail2ban_enabled }}; fail2ban-basic role"

- when:
    - 'fail2ban_enabled is true'
    - "'global.update_only' not in ansible_run_tags"
  block:
    - name: Install Fail2ban
      ansible.builtin.package:
        name: "{{ fail2ban_package_name_by_os_family[ansible_os_family] }}"

    - name: Enable Fail2ban service
      when: "is_docker is not true"
      ansible.builtin.systemd:
        name: fail2ban
        enabled: yes
        state: started
        masked: no