ansible/roles/basesecurity/templates/fail2ban/jail.d/local.conf.j2

# {{ ansible_managed }}

# Ban a host for 10mn
# if it has failed 5 times during the last 10mn
[sshd]
enabled = true
bantime  = 600
findtime  = 600
maxretry = 5

# Whitelist bastion
ignoreip = 10.128.0.254
Fail2ban by default 2019-03-14 15:45:19 +01:00			`# {{ ansible_managed }}`

			`# Ban a host for 10mn`
			`# if it has failed 5 times during the last 10mn`
			`[sshd]`
			`enabled = true`
			`bantime = 600`
			`findtime = 600`
			`maxretry = 5`
Whitelist proxy 2019-03-23 13:00:18 +01:00
			`# Whitelist bastion`
			`ignoreip = 10.128.0.254`