Repositionning of the fail2ban configuration with nftables from wireguard to...

Repositionning of the fail2ban configuration with nftables from wireguard to ext_srv as all servers exposed to the outside should be protected as well. Also minor cosmetic changes and light reordering.

tasks/config_fail2ban.yml

 ---
+# The unban script will allow fail2ban to delete rules from nftables by finding their handles
+- name: Create an unban script for Fail2Ban to work with nftables
+  template:
+    src: nftables_unban.j2
+    dest: /usr/local/bin/nftables_unban
+    mode: '0755'
+
 # The date script will generate the correct path for the log
 - name: Create date script for Fail2Ban logpath
   template: