ajout du nouveau serveur imio + réoganisation des variables

roles/common/files/jail.conf

@@ -4,8 +4,7 @@ backend = systemd
 banaction = nftables-multiport
 
 # 92.154.111.181 - IP des bureaux de nereide
-# 86.244.5.54 - IP maison Antoine
-ignoreip = 127.0.0.1 92.154.111.181 86.244.5.54
+ignoreip = 127.0.0.1 92.154.111.181
 findtime = 1h
 bantime = 1d
 maxretry = 3

roles/common/handlers/main.yml

@@ -6,8 +6,8 @@
     daemon_reload: true
     enabled: true
 
-- name: start nftables
+- name: restarted nftables
   systemd:
     name: nftables
-    state: started
+    state: restarted
     enabled: true

roles/common/tasks/jitsi_stats.yml

@@ -6,8 +6,8 @@
     path: "/etc/jitsi/videobridge/sip-communicator.properties"
     regexp: "^org.jitsi.videobridge.ENABLE_STATISTICS"
     line: "org.jitsi.videobridge.ENABLE_STATISTICS=true"
-
-- name: "configuration de jvb pour transporter les stats via colibri REST api"
+    
+- name: configuration du videobridge pour transporter les stats via colibri REST api
   lineinfile:
     path: "/etc/jitsi/videobridge/sip-communicator.properties"
     regexp: "^org.jitsi.videobridge.STATISTICS_TRANSPORT"

roles/common/tasks/sys_conf.yml

@@ -1,9 +1,13 @@
 ---
-- name: Installation de fail2ban
+- name: Installation de fail2ban et nftables
   apt:
-    name: fail2ban
+    pkg:
+      - fail2ban
+      - nftables
+    update_cache: true
+    state: present
 
-- name: Appliquation des règles de ban
+- name: Appliquation des règles de ban ssh
   template:
     src: ../files/jail.conf
     dest: /etc/fail2ban/jail.d/jail.conf
@@ -27,5 +31,5 @@
     src: ../files/nftables.conf
     dest: /etc/nftables.conf
   notify:
-    - start nftables
+    - restarted nftables
     - restart fail2ban