get rid of fail2ban, it doesnt actually help
[ansible.git] / email.yml
index a4bb8e813f36299cefa7d7797413e0ac26317ca6..6698af49e0b85736c0598a2e7daa8658373c2d52 100644 (file)
--- a/email.yml
+++ b/email.yml
@@ -1,4 +1,11 @@
-- hosts: all
+- hosts: email
   roles:
   - postfix
   - journalwatch
+  tasks:
+  # some basic security stuff that relies on working email
+  - name: install apticron
+    apt: name=apticron state=latest
+  # cleanup
+  - name: clean up fail2ban
+    apt: name=fail2ban state=absent purge=true