stackhpc · sjpb · Aug 10, 2022 · Jul 12, 2022 · Jul 12, 2022 · Jul 12, 2022
@@ -96,6 +96,8 @@
   become: yes
   tags:
     - reboot
+    - selinux
+    - update
   tasks:
     - name: Check for pending reboot from package updates
       stat: 

@@ -70,8 +70,9 @@ cluster
 # Hosts to install fail2ban on to protect SSH - uses firewalld
 # https://www.fail2ban.org/wiki/index.php/Main_Page
 
-[firewalld]
+[firewalld:children]
 # Hosts to install firewalld on - see ansible/roles/filewalld
+fail2ban
 
 [block_devices]
 # Superset of hosts to configure filesystems on - see ansible/roles/block_devices/README.md

@@ -37,10 +37,6 @@ cluster
 # Hosts to install fail2ban on to protect SSH
 login
 
-[firewalld:children]
-# Hosts to install firewalld on
-fail2ban
-
 [block_devices:children]
 # Environment-specific so not defined here
-Original file line number
+Diff line change
@@ Expand Up / @@ -96,6 +96,8 @@ @@
       become: yes
       tags:
         - reboot
+        - selinux
+        - update
       tasks:
         - name: Check for pending reboot from package updates
           stat:
@@ Expand Down @@