Enable fail2ban for gitlab_runners group

group_vars/gitlab_runners.yml

+fail2ban_jails:
+  sshd: true
+  postfix: false
+  dovecot: false

playbooks/gitlab-runners.yml

@@ -7,4 +7,5 @@
     - { role: firewalld }
     - { role: sshd }
     - { role: root_ssh }
+    - { role: fail2ban }
     - { role: gitlab-runner }