- name: Install fail2ban
  ansible.builtin.apt:
    pkg:
    - fail2ban
    - python3-systemd

- name: Copy fail2ban config
  ansible.builtin.template:
    src: fail2ban.local.j2
    dest: /etc/fail2ban/fail2ban.local
    owner: root
    group: root
    mode: 0644
  notify: Restart fail2ban

- name: Copy jail config
  ansible.builtin.template:
    src: jail.local.j2
    dest: /etc/fail2ban/jail.local
    owner: root
    group: root
    mode: 0644
  notify: Restart fail2ban

- name: Clear debian default jail config
  ansible.builtin.copy:
    content: ''
    dest: /etc/fail2ban/jail.d/defaults-debian.conf
    owner: root
    group: root
    mode: 0644
  notify: Restart fail2ban