|
@@ -30,6 +30,21 @@
|
|
when:
|
|
when:
|
|
- ansible_os_family == 'Fedora'
|
|
- ansible_os_family == 'Fedora'
|
|
|
|
|
|
|
|
+- name: Check for systemd-oomd conf file
|
|
|
|
+ ansible.builtin.stat:
|
|
|
|
+ path: /etc/systemd/oomd.conf
|
|
|
|
+ register: oomd_conf
|
|
|
|
+
|
|
|
|
+
|
|
|
|
+- name: Create copy of oomd.conf
|
|
|
|
+ ansible.builtin.copy:
|
|
|
|
+ src: /usr/lib/systemd/oomd.conf
|
|
|
|
+ dest: /etc/systemd/oomd.conf
|
|
|
|
+ remote_src: yes
|
|
|
|
+ when:
|
|
|
|
+ - oomd_conf.stat.exists == False
|
|
|
|
+
|
|
|
|
+
|
|
- name: Loosen up systemd-oomd defaults
|
|
- name: Loosen up systemd-oomd defaults
|
|
lineinfile:
|
|
lineinfile:
|
|
path: /etc/systemd/oomd.conf
|
|
path: /etc/systemd/oomd.conf
|
|
@@ -37,11 +52,13 @@
|
|
insertafter: '^#DefaultMemoryPressureLimit='
|
|
insertafter: '^#DefaultMemoryPressureLimit='
|
|
line: DefaultMemoryPressureLimit=80%
|
|
line: DefaultMemoryPressureLimit=80%
|
|
|
|
|
|
|
|
+
|
|
- name: Install fail2ban
|
|
- name: Install fail2ban
|
|
package:
|
|
package:
|
|
name: fail2ban
|
|
name: fail2ban
|
|
state: present
|
|
state: present
|
|
|
|
|
|
|
|
+
|
|
- name: Configure fail2ban
|
|
- name: Configure fail2ban
|
|
template:
|
|
template:
|
|
src: ssh.local.j2
|
|
src: ssh.local.j2
|