Added fail2ban & properly setup UFW

tasks/essential.yml

@@ -24,6 +24,7 @@
       - nginx
       - tor
       - ufw
+      - fail2ban
       - htop
       - zsh # :D
       - python3-certbot-nginx

tasks/firewall.yml

@@ -16,3 +16,18 @@
     rule: allow
     port: '443'
     proto: tcp
+
+- name: Startup UFW
+  community.general.ufw:
+    state: enabled
+
+- name: Copy fail2ban jail config
+  copy:
+    src: templates/fail2ban/jails.local
+    dest: /etc/fail2ban/jail.d/jails.local
+
+- name: Enable fail2ban service
+  systemd:
+    name: fail2ban
+    enabled: yes
+    state: restarted

templates/fail2ban/jails.local

@@ -0,0 +1,8 @@
+[sshd]
+enabled = true
+
+[nginx-http-auth]
+enabled = true
+
+[nginx-botsearch]
+enabled = true