fail2ban; minor fixes to ansible syntax

host_vars/apollo.archlinux.org

@@ -39,5 +39,7 @@ zabbix_agent_host_groups:
   - Zabbix servers
 
 fail2ban_jails:
-  - nginx
-  - postfix
+  sshd: true
+  postfix: true
+  dovecot: false
+  nginx: true

host_vars/orion.archlinux.org/misc

@@ -27,3 +27,4 @@ fail2ban_jails:
   sshd: true
   postfix: true
   dovecot: true
+  nginx: false

roles/fail2ban/defaults/main.yml

@@ -4,6 +4,7 @@ fail2ban_jails:
   sshd: false
   postfix: false
   dovecot: false
+  nginx: false
 
 # use variables for these directives so they can be overridden at a host or
 # group level as required. note that there cannot be a space between the

roles/fail2ban/tasks/main.yml

@@ -5,6 +5,14 @@
   notify:
     - restart fail2ban
 
+- name: create systemd unit override path
+  file:
+    path: "/etc/systemd/system/fail2ban.service.d"
+    state: "directory"
+    owner: "root"
+    group: "root"
+    mode: 0755
+
 - name: install systemd unit override file
   template:
     src: "fail2ban.service.j2"