From 0c0cadb44add1129fe07a7115f34da0cff4a57ad Mon Sep 17 00:00:00 2001
From: Eesaan Atluri <atlurie@uab.edu>
Date: Mon, 27 Jan 2025 16:31:15 -0500
Subject: [PATCH] feat: Use appropriate variable name for fail2ban whitelist
ips
---
ansible/group_vars/all | 2 +-
ansible/roles/fail2ban/templates/jail.local.j2 | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/ansible/group_vars/all b/ansible/group_vars/all
index 357ce7b..51a889a 100644
--- a/ansible/group_vars/all
+++ b/ansible/group_vars/all
@@ -50,7 +50,6 @@
# ssh proxy
enable_ssh_proxy_config: false
sshpiper_dest_dir: "/opt/sshpiper"
- fail2ban_cidr_list: "127.0.0.1/8"
# rsyslog
enable_rsyslog_config: false
@@ -81,3 +80,4 @@
maxretry: 1
findtime: 600
bantime: 1200
+ fail2ban_white_list: "127.0.0.1/8"
diff --git a/ansible/roles/fail2ban/templates/jail.local.j2 b/ansible/roles/fail2ban/templates/jail.local.j2
index af6ae66..87f9e4f 100644
--- a/ansible/roles/fail2ban/templates/jail.local.j2
+++ b/ansible/roles/fail2ban/templates/jail.local.j2
@@ -1,7 +1,7 @@
[DEFAULT]
banaction = firewalld
bantime = {{ bantime }}
-ignoreip = {{ fail2ban_cidr_list }}
+ignoreip = {{ fail2ban_white_list }}
[sshd]
enabled = true
--
GitLab