Fail2ban WordPress

An Ansible Role that installs the fail2ban service and WordPress fail2ban plugin on RedHat systems.

Requirements

A WordPress installation must exist on the target system.

Role Variables

Available variables are listed below, along with default values (see defaults/main.yml):

fail2ban_wordress_plugin_name: wp-fail2ban

Name of the WordPress fail2ban plugin.

fail2ban_wordress_plugin_version: ""

Version of the plugin to install, if empty the latest (development) version is installed.

fail2ban_wordress_filter_file: wordpress-hard.conf

Fail2ban filters file to use, copied from the downloaded plugin.

fail2ban_wordress_plugins_dir: /tmp

Path to the WordPress plugins directory, or temporary directory if using as must use plugin.

fail2ban_wordress_mu_plugins_dir: false

Path to the mu-plugins directory (if installing as a must use plugin).

fail2ban_wordress_jail_config:
  logpath: /var/log/messages
  maxretry: 5
  bantime: 21600
  findtime: 86400

Fail2ban jail config settings.

Dependencies

None.

Example Playbook

- hosts: webservers
  become: yes
  vars_files:
    - vars/main.yml
  roles:
     - memiah.fail2ban-wordpress

Inside vars/main.yml:

Installing version 3.0.0 to mu-plugins:

fail2ban_wordress_plugin_version: "3.0.0"
fail2ban_wordress_mu_plugins_dir: /path/to/mu-plugins

Installing version 2.3.x to wp-plugins:

fail2ban_wordress_plugin_version: "2.3.2"
fail2ban_wordress_plugins_dir: /path/to/wp-plugins
fail2ban_wordress_filter_file: wordpress.conf

View the status of the wordpress filter:

fail2ban-client status wordpress

License

MIT / BSD

Author Information

This role was created in 2016 by Memiah Limited.