main.yml

# by default only the sshd jail is enabled
# override this variable in a host/group file to enable additional jails
fail2ban_jails:
  sshd: true
  postfix: false
  dovecot: false
  nginx_limit_req: false

# use variables for these directives so they can be overridden at a host or
# group level as required. note that there cannot be a space between the
# integer and the unit (eg "15min" == good, "15 min" == bad).
# refer to `man jail.conf`
fail2ban_findtime: 15min
fail2ban_bantime: 1day
fail2ban_maxretry: 5