deployment/roles/net-security/tasks/main.yml

- name: Install fail2ban.
  apt:
    name: fail2ban
    state: present

# TODO add proper fail2ban config

- name: Ensure fail2ban is started & enabled.
  service:
    name: fail2ban
    state: started
    enabled: true

# TODO install UFW