confdroid_fail2ban/manifests/main/files.pp

## fail2ban_cd::main::files.pp
# Module name: fail2ban_cd
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary  Class manages all configuration files required for fail2ban_cd.
##############################################################################
class fail2ban_cd::main::files (

) inherits fail2ban_cd::params {
  require fail2ban_cd::main::dirs

  if $fn_manage_config == true {
    # manage fail2ban.conf

    file { $fn_fail2ban_conf_file:
      ensure   => file,
      path     => $fn_fail2ban_conf_file,
      owner    => 'root',
      group    => 'root',
      mode     => '0640',
      selrange => s0,
      selrole  => object_r,
      seltype  => etc_t,
      seluser  => system_u,
      content  => template($fn_fail2ban_conf_erb),
      notify   => Service[$fn_service],
    }

    # manage fail2ban.local

    file { $fn_fail2ban_local_file:
      ensure   => file,
      path     => $fn_fail2ban_local_file,
      owner    => 'root',
      group    => 'root',
      mode     => '0640',
      selrange => s0,
      selrole  => object_r,
      seltype  => etc_t,
      seluser  => system_u,
      content  => template($fn_fail2ban_local_erb),
      notify   => Service[$fn_service],
    }

    # manage jail.conf

    file { $fn_jail_conf_file:
      ensure   => file,
      path     => $fn_jail_conf_file,
      owner    => 'root',
      group    => 'root',
      mode     => '0640',
      selrange => s0,
      selrole  => object_r,
      seltype  => etc_t,
      seluser  => system_u,
      content  => template($fn_jail_conf_erb),
      notify   => Service[$fn_service],
    }

    # manage jail.local

    file { $fn_jail_local_file:
      ensure   => file,
      path     => $fn_jail_local_file,
      owner    => 'root',
      group    => 'root',
      mode     => '0640',
      selrange => s0,
      selrole  => object_r,
      seltype  => etc_t,
      seluser  => system_u,
      content  => template($fn_jail_local_erb),
      notify   => Service[$fn_service],
    }

    # manage paths-common.conf

    file { $fn_paths_common_file:
      ensure   => file,
      path     => $fn_paths_common_file,
      owner    => 'root',
      group    => 'root',
      mode     => '0640',
      selrange => s0,
      selrole  => object_r,
      seltype  => etc_t,
      seluser  => system_u,
      content  => template($fn_paths_common_erb),
      notify   => Service[$fn_service],
    }
  }
}