ansible-roles/ubuntu-deb-general/tasks/denyhost.yml

24 lines
702 B
YAML

---
- name: install denyhosts on debian <=7 and ubuntu <= 12.04
apt: pkg={{ item }} state=present
with_items:
- denyhosts
tags: denyhosts
- name: ensure CM can access the VMs
action: |
lineinfile name=/etc/hosts.allow regexp="sshd: 146.48.123.18$" line="sshd: 146.48.123.18"
tags: denyhosts
- name: ensure Monitoring can connect via ssh
action: |
lineinfile name=/etc/hosts.allow regexp="sshd: 146.48.123.23$" line="sshd: 146.48.123.23"
tags: denyhosts
- name: Set the treshold for root on the denyhosts config file
lineinfile: |
name=/etc/denyhosts.conf regexp="^DENY_THRESHOLD_ROOT = " line="DENY_THRESHOLD_ROOT = 5"
notify: Restart denyhosts
tags: denyhosts