# {{ ansible_managed }}

# Ban a host for 10mn
# if it has failed 5 times during the last 10mn
[sshd]
enabled = true
bantime  = 600
findtime  = 600
maxretry = 5

# Whitelist bastion
ignoreip = 10.128.0.254