--- - name: Setup fail2ban hosts: all become: true roles: - role: fail2ban when: enable_fail2ban | default(true)