- hosts: fail2ban
  connection: local
  vars:
    fail2ban_jails:
      - name: ssh
        logpath: /var/log/alternatives.log
        filter: sshd
        port: 22
      - name: nextcloud
        logpath: /var/log/alternatives.log
        filter: nextcloud
        port: 80,443
        additional:
          maxretry: 2
    fail2ban_filters:
      - name: nextcloud
        failregex: Login failed.*Remote IP.*'<HOST>' 
  roles:
      - ansible-role-fail2ban