add readme and initial example

README.md

@@ -0,0 +1,15 @@
+# Beispiel Ansible
+
+## Erste Schritte
+
+Du musst einmal die `host_vars/server.example.com.yml` Datei umbennenen und die `inventory` Datei anpassen um deinen Host zu erreichen.
+In `host_vars/server.example.com.yml` kannst du fail2ban und nftables konfigurieren. 
+
+## Dokumentation
+
+### nftables
+- [Rolle](https://github.com/ipr-cnrs/nftables/blob/master/README.md)
+
+### fail2ban
+- [Rolle](https://github.com/Oefenweb/ansible-fail2ban/blob/master/README.md)
+- [Konfiguration](https://github.com/fail2ban/fail2ban/wiki/Proper-fail2ban-configuration)

ansible.cfg

@@ -0,0 +1,2 @@
+[connection]
+pipelining = True

host_vars/server.example.com.yml

@@ -0,0 +1,12 @@
+---
+nft_define_host:
+  input tcp accepted:
+    name: in_tcp_accept
+    value: '{ ssh, http, https }'
+  output tcp accepted:
+    name: out_tcp_accept
+    value: '{ ssh, http, https }'
+
+fail2ban_services:
+  - name: sshd
+    backend: systemd

inventory

@@ -0,0 +1 @@
+server.example.com ansible_host=0.0.0.0 ansible_ssh_user=example become=true become_user=root

requirements.yaml

@@ -0,0 +1,6 @@
+roles:
+  - src: ipr-cnrs.nftables
+    version: v2.2.1
+
+  - src: Oefenweb.fail2ban
+    version: v4.0.8

site.yml

@@ -0,0 +1,11 @@
+- name: Import nftables
+  hosts:
+    - all
+  roles:
+    - ipr-cnrs.nftables
+
+- name: Import fail2ban
+  hosts:
+    - all
+  roles:
+    - Oefenweb.fail2ban