Alternatives and combined efforts

[ypid]

FYI, as this role targets Ubuntu, you may find DebOps interesting which can do all that this role lists under features and more. It is a more comprehensive approach of doing config management for Debian-based hosts.

Only instead of Sshguard, we use fail2ban.

Otherwise, there is also https://github.com/dev-sec if you don’t like comprehensive approaches 😉

Full disclosure: I am a developer of DebOps.