--- #file - roles/common/defaults/main.yml # add a dummy API key for AbuseIPDB.com (override with real one in host_vars) abuseipdb_api_key: dummy fail2ban_maxretry: 6 # 1 hour in seconds fail2ban_findtime: 3600 # 2 weeks in seconds fail2ban_bantime: 1209600 fail2ban_ignoreip: 127.0.0.1/8 172.26.0.0/16 192.168.5.0/24 # Disable SSH passwords. Must use SSH keys. This is OK because we add the keys # before re-configuring the SSH daemon to disable passwords. ssh_password_authentication: disabled # vim: set ts=2 sw=2: