Minor change to avoid an alert on Alpine with allowipv6

tasks/config_fail2ban.yml

@@ -22,14 +22,23 @@
 
 # There was an error message with the restart of fail2ban on Alpine systems without that change.
 # Also, it makes sure ipv6 is being analysed.
-- name: Ensure [Definition] section and allowipv6 are present
+# Added also this part to remove duplicates of either parts of the block
+- name: Remove duplicate [Definition] or allowipv6 = yes lines
+  lineinfile:
+    path: /etc/fail2ban/fail2ban.conf
+    regexp: '^\[Definition\]|^allowipv6 = yes$'
+    state: absent
+
+- name: Ensure [Definition] section with allowipv6 = yes is present with an extra empty line below [Thread]
   blockinfile:
     path: /etc/fail2ban/fail2ban.conf
     block: |
       [Definition]
+
       allowipv6 = yes
+      
     marker: "# {mark} ANSIBLE MANAGED BLOCK"
-  when: "'[Definition]' not in lookup('file', '/etc/fail2ban/fail2ban.conf') or 'allowipv6 =' not in lookup('file', '/etc/fail2ban/fail2ban.conf')"
+    insertbefore: '^\[Thread\]'
 
 # Updating fail2ban to be able to work with the way our nftables work
 - name: Deploy custom nftables action for Fail2Ban