---
fail2ban_package: fail2ban

fail2ban_loglevel: INFO
fail2ban_logtarget: /var/log/fail2ban.log
fail2ban_socket: /var/run/fail2ban/fail2ban.sock

fail2ban_ignoreip: 127.0.0.1/8 {{ ip_whitelist | join(' ') }}
fail2ban_bantime: 600
fail2ban_maxretry: 6

fail2ban_backend: polling

fail2ban_destemail: root@localhost
fail2ban_banaction: iptables-multiport
fail2ban_mta: sendmail
fail2ban_protocol: tcp
fail2ban_chain: INPUT

fail2ban_action: action_

fail2ban_services:
  - name: ssh
    port: ssh
    filter: sshd
    logpath: /var/log/auth.log

---
fail2ban_package: fail2ban

fail2ban_loglevel: INFO
fail2ban_logtarget: /var/log/fail2ban.log
fail2ban_socket: /var/run/fail2ban/fail2ban.sock

fail2ban_ignoreip: 127.0.0.1/8 {{ ip_whitelist | join(' ') }}
fail2ban_bantime: 600
fail2ban_maxretry: 6

fail2ban_backend: polling

fail2ban_destemail: root@localhost
fail2ban_banaction: iptables-multiport
fail2ban_mta: sendmail
fail2ban_protocol: tcp
fail2ban_chain: INPUT

fail2ban_action: action_

fail2ban_services_default:
  - name: ssh
    port: ssh
    filter: sshd
    logpath: /var/log/auth.log

fail2ban_services_custom: []
fail2ban_services: "{{ fail2ban_services_default + fail2ban_services_custom }}"

Make Fail2ban services list extensible
Make Fail2ban services list extensible

enable adding custom services in 'group_vars/';
rename default list to 'fail2ban_services_default';
create 'fail2ban_services_default';
combine 'default' & 'custom'.
