Fail2ban Jail configuration file; for an Ansible playbook example.

jail.local

[DEFAULT]

# email address to receive notifications.
destemail = root@localhost    
# the email address from which to send emails.
sender = root@<fq-hostname>    
# name on the notification emails.
sendername = Fail2Ban    
# email transfer agent to use. 
mta = sendmail   

# see action.d/ufw.conf
actionban = ufw.conf
# see action.d/ufw.conf 
actionunban = ufw.conf   

[sshd]
enabled = true
port = ssh
filter = sshd
# the length of time between login attempts for maxretry. 
findtime = 600
# attempts from a single ip before a ban is imposed.
maxretry = 5
# the number of seconds that a host is banned for.
bantime = 3600

Playbook in question: https://gist.github.com/5car1z/76dd1e48f9b16dbd2fb370bba1e2d393

https://www.tricksofthetrades.net/2018/05/19/ansible-fail2ban-playbook/