---

- name: Install required packages
  apt:
    state: present
    name:
      - fail2ban # base package
      # Recommended for fail2ban:
      - iptables # blocking using native firewall
      - python3-pyinotify # watch files natively
      - python3-systemd # view journals of systemd
    install_recommends: no

- name: Configure sshd jail
  template:
    src: sshd.jail.conf
    dest: "{{ jails_directory }}/sshd.local"
  notify: reload fail2ban