# {{ ansible_managed }}

<IfModule mod_evasive20.c>
{% for key, value in apache_mod_evasive_settings | dictsort %}
    {{ key }}        {{ value }}
{% endfor %}

    #DOSEmailNotify      you@yourdomain.com
    #DOSSystemCommand    "su - someuser -c '/sbin/... %s ...'"
    #DOSLogDir           "/var/log/mod_evasive"

    DOSWhitelist         10.*.*.*
    DOSWhitelist         192.168.*.*

    DOSWhitelist         63.254.74.*
    DOSWhitelist         8.28.239.*

{% for ip in firewall_monitoring_ips|default([]) if ip|ipv4('public') %}
    DOSWhitelist         {{ ip }}
{% endfor %}

{% for ip in firewall_whitelist_office_ip|default([]) %}
    DOSWhitelist         {{ ip | regex_replace('[0-9]+/[0-9]+', '*') }}
{% endfor %}

{% for ip in apache_mod_evasive_whitelist|default([]) %}
    DOSWhitelist         {{ ip | regex_replace('[0-9]+/[0-9]+', '*') }}
{% endfor %}

</IfModule>