playbooks/debian/roles/firewall/tasks/main.yml

   1 - name: Install fail2ban
   2   become: true
   3   apt:
   4     install_recommends: no
   5     name: fail2ban
   6     state: latest
   7     update_cache: yes
   8   register: fail2ban
   9
  10 - name: Configure Debian firewall
  11   become: true
  12   copy:
  13     src: etc
  14     dest: /
  15     owner: root
  16     group: root
  17     directory_mode: '0750'
  18     mode: '0750'
  19     force: no
  20   register: etc
  21
  22 - name: Fix permissions for /etc/network/functions
  23   become: true
  24   file:
  25     path: /etc/network/functions.phd
  26     mode: '0640'
  27   register: functions
  28
  29 - name: Start Debian firewall
  30   become: true
  31   service:
  32     name: iptables.sh
  33     state: restarted
  34   when: fail2ban.changed or etc.changed or functions.changed