main.yml

---

monitor_packages:
  - ubicast-monitor
  - ubicast-monitor-runtime

monitor_shell_pwd: "{{ envsetup_monitor_shell_pwd }}"
monitor_hostname: "{{ envsetup_monitor_server_name }}"

monitor_fail2ban_enabled: "{{ envsetup_fail2ban_enabled | d(true) }}"
monitor_f2b_filter:
  name: monitor
  content: |
    [INCLUDES]
    before = common.conf
    [Definition]
    failregex = INFO Wrong credentials given to login\. IP: <HOST>, username: \S+\.$
                INFO Wrong crendentials given to login\. IP: <HOST>, username: \S+\.$
    ignoreregex =
monitor_f2b_jail:
  name: monitor
  content: |
    [monitor]
    logpath = /home/msmonitor/msmonitor/logs/site.log
    enabled = {% if monitor_fail2ban_enabled | bool %}true{% else %}false{% endif %}

monitor_firewall_enabled: true
monitor_ferm_rules_filename: monitor
monitor_ferm_input_rules:
  - proto:
      - tcp
    dport:
      - 80
      - 443
monitor_ferm_output_rules: []
monitor_ferm_global_settings:

...