18 lines
521 B
YAML
18 lines
521 B
YAML
---
|
|
#file - roles/common/defaults/main.yml
|
|
|
|
# add a dummy API key for AbuseIPDB.com (override with real one in host_vars)
|
|
abuseipdb_api_key: dummy
|
|
fail2ban_maxretry: 6
|
|
# 1 hour in seconds
|
|
fail2ban_findtime: 3600
|
|
# 2 weeks in seconds
|
|
fail2ban_bantime: 1209600
|
|
fail2ban_ignoreip: 127.0.0.1/8 172.26.0.0/16 192.168.5.0/24
|
|
|
|
# Disable SSH passwords. Must use SSH keys. This is OK because we add the keys
|
|
# before re-configuring the SSH daemon to disable passwords.
|
|
ssh_password_authentication: disabled
|
|
|
|
# vim: set ts=2 sw=2:
|