robertdebock / ansible-role-fail2ban

Install and configure fail2ban on your system.
https://robertdebock.nl/
Apache License 2.0
59 stars 29 forks source link

Change /etc/fail2ban/fail2ban.conf to /etc/fail2ban/fail2ban.local #10

Closed gotmax23 closed 3 years ago

gotmax23 commented 3 years ago

The config file path for the configure fail2ban.conf task should use the .local extension, like the configure jail.local task uses.

Every .conf file can be overridden with a file named .local. The .conf file is read first, then .local, with later settings overriding earlier ones. Thus, a .local file doesn't have to include everything in the corresponding .conf file, only those settings that you wish to override.

Modifications should take place in the .local and not in the .conf. This avoids merging problem when upgrading. These files are well documented and detailed information should be available there.

Source: https://www.fail2ban.org/wiki/index.php/MANUAL_0_8

robertdebock commented 3 years ago

Thanks for the contribution!