initial upload

roles/apache/templates/etc_apache2_mods-available_evasive.conf.j2

@@ -0,0 +1,30 @@
+# {{ ansible_managed }}
+
+<IfModule mod_evasive20.c>
+{% for key, value in apache_mod_evasive_settings | dictsort %}
+    {{ key }}        {{ value }}
+{% endfor %}
+
+    #DOSEmailNotify      you@yourdomain.com
+    #DOSSystemCommand    "su - someuser -c '/sbin/... %s ...'"
+    #DOSLogDir           "/var/log/mod_evasive"
+
+    DOSWhitelist         10.*.*.*
+    DOSWhitelist         192.168.*.*
+
+    DOSWhitelist         63.254.74.*
+    DOSWhitelist         8.28.239.*
+
+{% for ip in firewall_monitoring_ips|default([]) if ip|ipv4('public') %}
+    DOSWhitelist         {{ ip }}
+{% endfor %}
+
+{% for ip in firewall_whitelist_office_ip|default([]) %}
+    DOSWhitelist         {{ ip | regex_replace('[0-9]+/[0-9]+', '*') }}
+{% endfor %}
+
+{% for ip in apache_mod_evasive_whitelist|default([]) %}
+    DOSWhitelist         {{ ip | regex_replace('[0-9]+/[0-9]+', '*') }}
+{% endfor %}
+
+</IfModule>