From b6c1c67545f9912556ea6130b1f4b2762feea3e2 Mon Sep 17 00:00:00 2001
From: Ricky Elrod <codeblock@lockbox01.phx2.fedoraproject.org>
Date: Thu, 12 Dec 2013 22:26:10 +0000
Subject: [PATCH] add fail2ban because access_log spam is annoying

---
 playbooks/hosts/hrf.cloud.fedoraproject.org.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/playbooks/hosts/hrf.cloud.fedoraproject.org.yml b/playbooks/hosts/hrf.cloud.fedoraproject.org.yml
index 0bc693fb91..6dc504b4c9 100644
--- a/playbooks/hosts/hrf.cloud.fedoraproject.org.yml
+++ b/playbooks/hosts/hrf.cloud.fedoraproject.org.yml
@@ -47,7 +47,13 @@
         - mod_wsgi
         - htop # not a dep, but handy
         - git
+        - fail2ban
+
+    - name: enable fail2ban and start it
+      shell: chkconfig fail2ban on && service fail2ban start
+
     - name: clone the flask repo
       git: repo=git://github.com/fedora-infra/hrf.git dest=/srv/www/hrf
+
     - name: enable port 80
       command: lokkit -p '80:tcp'