Add logrotate and allow read access by group adm

files/logrotate

+/var/log/fail2ban.log {
+
+    weekly
+    rotate 4
+    compress
+
+    delaycompress
+    missingok
+    postrotate
+        fail2ban-client flushlogs 1>/dev/null
+    endscript
+    create 640 root adm
+}

tasks/install.yml

@@ -40,6 +40,13 @@
     mode: '644'
     remote_src: yes
 
+- name: "Copy LogRotate Config"
+  copy:
+    src: 'logrotate'
+    dest: '/etc/logrotate.d/fail2ban'
+    mode: '644'
+  tags: 'abcabcabc'
+
 - name: "Create symbolic links"
   file:
     src: '/usr/local/bin/{{ item }}'