Shift headers into the same block
Rename play to more suitable name
Add fail2ban role