Merge branch 'master' of gitlab.puppetsoft.com:12ww1160/cd_fail2ban into HEAD
This commit is contained in:
Jenkins Server
64
CHANGELOG.md
64
CHANGELOG.md
@@ -8,9 +8,69 @@ Changelog of Git Changelog.
|
||||
<h2> No issue </h2>
|
||||
|
||||
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/dc918f331ab225f">dc918f331ab225f</a> Arne Teuke <i>2017-08-03 11:01:32</i>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/cb4b482e20b2be5">cb4b482e20b2be5</a> Arne Teuke <i>2017-08-03 14:56:00</i>
|
||||
<p>
|
||||
<h3>initial commit</h3>
|
||||
<h3>fixed controls for main conf/local files</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/6f0942201f20c66">6f0942201f20c66</a> Jenkins Server <i>2017-08-03 14:55:39</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 9</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/8c3df7530a1ab21">8c3df7530a1ab21</a> Arne Teuke <i>2017-08-03 14:51:29</i>
|
||||
<p>
|
||||
<h3>added controls for main conf/local files</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/21086d1f714fd6a">21086d1f714fd6a</a> Jenkins Server <i>2017-08-03 14:51:10</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 8</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/202c50762d6411e">202c50762d6411e</a> Arne Teuke <i>2017-08-03 14:29:17</i>
|
||||
<p>
|
||||
<h3>added controls for main conf/local files</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/a22f3fb29e72361">a22f3fb29e72361</a> Jenkins Server <i>2017-08-03 14:28:57</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 7</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/3fdfda26d55dc96">3fdfda26d55dc96</a> Jenkins Server <i>2017-08-03 13:10:45</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 6</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/fdf29a4e38ba36a">fdf29a4e38ba36a</a> Arne Teuke <i>2017-08-03 13:09:41</i>
|
||||
<p>
|
||||
<h3>added directory control</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/3c581b56cc82cb9">3c581b56cc82cb9</a> Arne Teuke <i>2017-08-03 13:01:25</i>
|
||||
<p>
|
||||
<h3>added directory control</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/ab94577ae7093a2">ab94577ae7093a2</a> Jenkins Server <i>2017-08-03 13:01:03</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 4</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/82035d505ca0352">82035d505ca0352</a> Arne Teuke <i>2017-08-03 12:13:00</i>
|
||||
<p>
|
||||
<h3>added service control</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/423db4a35427180">423db4a35427180</a> Jenkins Server <i>2017-08-03 12:12:32</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 3</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/059e16bca627858">059e16bca627858</a> Arne Teuke <i>2017-08-03 12:07:42</i>
|
||||
<p>
|
||||
<h3>added service control</h3>
|
||||
|
||||
</p>
|
||||
|
||||
|
||||
@@ -1,4 +1,27 @@
|
||||
.
|
||||
|-- doc
|
||||
| |-- css
|
||||
| | |-- common.css
|
||||
| | |-- full_list.css
|
||||
| | `-- style.css
|
||||
| |-- js
|
||||
| | |-- app.js
|
||||
| | |-- full_list.js
|
||||
| | `-- jquery.js
|
||||
| |-- puppet_classes
|
||||
| | |-- cd_fail2ban_3A_3Amain_3A_3Aconfig.html
|
||||
| | |-- cd_fail2ban_3A_3Amain_3A_3Adirs.html
|
||||
| | |-- cd_fail2ban_3A_3Amain_3A_3Afiles.html
|
||||
| | |-- cd_fail2ban_3A_3Amain_3A_3Ainstall.html
|
||||
| | |-- cd_fail2ban_3A_3Amain_3A_3Aservice.html
|
||||
| | |-- cd_fail2ban_3A_3Aparams.html
|
||||
| | `-- cd_fail2ban.html
|
||||
| |-- file.README.html
|
||||
| |-- frames.html
|
||||
| |-- _index.html
|
||||
| |-- index.html
|
||||
| |-- puppet_class_list.html
|
||||
| `-- top-level-namespace.html
|
||||
|-- manifests
|
||||
| |-- main
|
||||
| | |-- config.pp
|
||||
@@ -8,10 +31,19 @@
|
||||
| | `-- service.pp
|
||||
| |-- init.pp
|
||||
| `-- params.pp
|
||||
|-- templates
|
||||
| |-- fail2ban_conf.erb
|
||||
| |-- fail2ban_local.erb
|
||||
| |-- jail_conf.erb
|
||||
| `-- jail_local.erb
|
||||
|-- tests
|
||||
| `-- UTF_Files
|
||||
|-- CHANGELOG.md
|
||||
|-- Gemfile
|
||||
|-- Gemfile.lock
|
||||
|-- Jenkinsfile
|
||||
|-- LICENSE
|
||||
`-- README.md
|
||||
|-- README.md
|
||||
`-- REPOSTRUCTURE.md
|
||||
|
||||
2 directories, 12 files
|
||||
8 directories, 38 files
|
||||
|
||||
@@ -132,7 +132,7 @@
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:29 2017 by
|
||||
Generated on Thu Aug 3 18:32:54 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -61,7 +61,7 @@
|
||||
<p>|Repo Name| version | Build
|
||||
Status|
|
||||
|---|---|---|---|
|
||||
|<code>cd_fail2ban</code>| 0.0.0.2 | <a
|
||||
|<code>cd_fail2ban</code>| 0.0.0.5 | <a
|
||||
href="https://jenkins.confdroid.com/buildStatus/icon?job=cd_fail2ban">{Build
|
||||
Status</a>/]|</p>
|
||||
|
||||
@@ -128,6 +128,15 @@ href="https://gitlab.puppetsoft.com/12WW1160/cd_fail2ban/blob/master/CHANGELOG.m
|
||||
<p>Installation
|
||||
* install required binaries</p>
|
||||
|
||||
<p>Configuration
|
||||
* manage directory structure (file system permissions,
|
||||
selinux context)
|
||||
* manage configration files (file system permissions,
|
||||
selinux context, content based on parameters)</p>
|
||||
|
||||
<p>Service
|
||||
* manage service status (running or stopped)</p>
|
||||
|
||||
<h3 id="label-Repo+Structure">Repo Structure</h3>
|
||||
|
||||
<p>Repostructure has moved to REPOSTRUCTURE.md in repo.</p>
|
||||
@@ -184,6 +193,10 @@ right out of box as is.</p>
|
||||
selinux is disabled, these contexts are ignored.</p>
|
||||
|
||||
<h3 id="label-Known+Problems">Known Problems</h3>
|
||||
<ul><li>
|
||||
<p>firewalld: firewalld is auto-installed on CentOS7 as dependency of fail2ban
|
||||
by yum.</p>
|
||||
</li></ul>
|
||||
|
||||
<h3 id="label-Support">Support</h3>
|
||||
<ul><li>
|
||||
@@ -238,7 +251,7 @@ environments.</p>
|
||||
</div></div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 18:32:55 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -61,7 +61,7 @@
|
||||
<p>|Repo Name| version | Build
|
||||
Status|
|
||||
|---|---|---|---|
|
||||
|<code>cd_fail2ban</code>| 0.0.0.2 | <a
|
||||
|<code>cd_fail2ban</code>| 0.0.0.5 | <a
|
||||
href="https://jenkins.confdroid.com/buildStatus/icon?job=cd_fail2ban">{Build
|
||||
Status</a>/]|</p>
|
||||
|
||||
@@ -128,6 +128,15 @@ href="https://gitlab.puppetsoft.com/12WW1160/cd_fail2ban/blob/master/CHANGELOG.m
|
||||
<p>Installation
|
||||
* install required binaries</p>
|
||||
|
||||
<p>Configuration
|
||||
* manage directory structure (file system permissions,
|
||||
selinux context)
|
||||
* manage configration files (file system permissions,
|
||||
selinux context, content based on parameters)</p>
|
||||
|
||||
<p>Service
|
||||
* manage service status (running or stopped)</p>
|
||||
|
||||
<h3 id="label-Repo+Structure">Repo Structure</h3>
|
||||
|
||||
<p>Repostructure has moved to REPOSTRUCTURE.md in repo.</p>
|
||||
@@ -184,6 +193,10 @@ right out of box as is.</p>
|
||||
selinux is disabled, these contexts are ignored.</p>
|
||||
|
||||
<h3 id="label-Known+Problems">Known Problems</h3>
|
||||
<ul><li>
|
||||
<p>firewalld: firewalld is auto-installed on CentOS7 as dependency of fail2ban
|
||||
by yum.</p>
|
||||
</li></ul>
|
||||
|
||||
<h3 id="label-Support">Support</h3>
|
||||
<ul><li>
|
||||
@@ -238,7 +251,7 @@ environments.</p>
|
||||
</div></div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:29 2017 by
|
||||
Generated on Thu Aug 3 18:32:55 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -139,7 +139,7 @@ class cd_fail2ban {
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 18:32:56 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -134,8 +134,7 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
27
|
||||
28
|
||||
29
|
||||
30
|
||||
31</pre>
|
||||
30</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 24</span>
|
||||
@@ -144,9 +143,8 @@ class cd_fail2ban::main::config (
|
||||
|
||||
) inherits cd_fail2ban::params {
|
||||
|
||||
if $fn_enable_fail2ban == true {
|
||||
include cd_fail2ban::main::service
|
||||
}
|
||||
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
@@ -155,7 +153,7 @@ class cd_fail2ban::main::config (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 18:32:56 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -86,24 +86,21 @@
|
||||
<p>cd_fail2ban::main::dirs.pp
|
||||
Module name: cd_fail2ban
|
||||
Author: Arne Teuke
|
||||
(arne_teuke@ConfDroid.com)</p>
|
||||
(arne_teuke@confdroid.com)
|
||||
License:
|
||||
This file is part of cd_fail2ban.</p>
|
||||
|
||||
<h1 id="label-License%3A">License:</h1>
|
||||
<p>cd_fail2ban is used for providing automatic configuration of Fail2Ban
|
||||
|
||||
<p>This file is part of cd_fail2ban.</p>
|
||||
|
||||
<p>cd_fail2ban is used for providing automatic configuration of
|
||||
<service /
|
||||
purpose>
|
||||
Copyright (C) 2016 ConfDroid (copyright@ConfDroid.com)
|
||||
This
|
||||
program is free software: you can redistribute it and/or modify
|
||||
it under
|
||||
the terms of the GNU General Public License as published by
|
||||
the Free
|
||||
Software Foundation, either version 3 of the License, or
|
||||
(at your option)
|
||||
any later version.</p>
|
||||
Copyright (C) 2017 confdroid (copyright@confdroid.com)
|
||||
This program is
|
||||
free software: you can redistribute it and/or modify
|
||||
it under the terms of
|
||||
the GNU General Public License as published by
|
||||
the Free Software
|
||||
Foundation, either version 3 of the License, or
|
||||
(at your option) any later
|
||||
version.</p>
|
||||
|
||||
<p>This program is distributed in the hope that it will be useful,
|
||||
but
|
||||
@@ -130,6 +127,7 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
23
|
||||
24
|
||||
25
|
||||
26
|
||||
@@ -138,10 +136,106 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
29
|
||||
30
|
||||
31
|
||||
32</pre>
|
||||
32
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41
|
||||
42
|
||||
43
|
||||
44
|
||||
45
|
||||
46
|
||||
47
|
||||
48
|
||||
49
|
||||
50
|
||||
51
|
||||
52
|
||||
53
|
||||
54
|
||||
55
|
||||
56
|
||||
57
|
||||
58
|
||||
59
|
||||
60
|
||||
61
|
||||
62
|
||||
63
|
||||
64
|
||||
65
|
||||
66
|
||||
67
|
||||
68
|
||||
69
|
||||
70
|
||||
71
|
||||
72
|
||||
73
|
||||
74
|
||||
75
|
||||
76
|
||||
77
|
||||
78
|
||||
79
|
||||
80
|
||||
81
|
||||
82
|
||||
83
|
||||
84
|
||||
85
|
||||
86
|
||||
87
|
||||
88
|
||||
89
|
||||
90
|
||||
91
|
||||
92
|
||||
93
|
||||
94
|
||||
95
|
||||
96
|
||||
97
|
||||
98
|
||||
99
|
||||
100
|
||||
101
|
||||
102
|
||||
103
|
||||
104
|
||||
105
|
||||
106
|
||||
107
|
||||
108
|
||||
109
|
||||
110
|
||||
111
|
||||
112
|
||||
113
|
||||
114
|
||||
115
|
||||
116
|
||||
117
|
||||
118
|
||||
119
|
||||
120
|
||||
121
|
||||
122
|
||||
123
|
||||
124
|
||||
125
|
||||
126
|
||||
127
|
||||
128</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 24</span>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 23</span>
|
||||
|
||||
class cd_fail2ban::main::dirs (
|
||||
|
||||
@@ -149,6 +243,103 @@ class cd_fail2ban::main::dirs (
|
||||
|
||||
require cd_fail2ban::main::install
|
||||
|
||||
# manage main dir
|
||||
|
||||
file { $fn_main_dir:
|
||||
ensure => directory,
|
||||
path => $fn_main_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage action.d dir
|
||||
|
||||
file { $fn_action_d_dir:
|
||||
ensure => directory,
|
||||
path => $fn_action_d_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage fail2ban.d dir
|
||||
|
||||
file { $fn_fail2ban_d_dir:
|
||||
ensure => directory,
|
||||
path => $fn_fail2ban_d_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage filter.d dir
|
||||
|
||||
file { $fn_filter_d_dir:
|
||||
ensure => directory,
|
||||
path => $fn_filter_d_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage jail.d dir
|
||||
|
||||
file { $fn_jail_d_dir:
|
||||
ensure => directory,
|
||||
path => $fn_jail_d_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage /var/lib/fail2ban
|
||||
|
||||
file { $fn_var_lib_dir:
|
||||
ensure => directory,
|
||||
path => $fn_var_lib_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => fail2ban_var_lib_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage /var/run/fail2bam
|
||||
|
||||
file { $fn_var_run_dir:
|
||||
ensure => directory,
|
||||
path => $fn_var_run_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => fail2ban_var_run_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
|
||||
}</pre>
|
||||
@@ -159,7 +350,7 @@ class cd_fail2ban::main::dirs (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 18:32:56 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -133,7 +133,74 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
26
|
||||
27
|
||||
28
|
||||
29</pre>
|
||||
29
|
||||
30
|
||||
31
|
||||
32
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41
|
||||
42
|
||||
43
|
||||
44
|
||||
45
|
||||
46
|
||||
47
|
||||
48
|
||||
49
|
||||
50
|
||||
51
|
||||
52
|
||||
53
|
||||
54
|
||||
55
|
||||
56
|
||||
57
|
||||
58
|
||||
59
|
||||
60
|
||||
61
|
||||
62
|
||||
63
|
||||
64
|
||||
65
|
||||
66
|
||||
67
|
||||
68
|
||||
69
|
||||
70
|
||||
71
|
||||
72
|
||||
73
|
||||
74
|
||||
75
|
||||
76
|
||||
77
|
||||
78
|
||||
79
|
||||
80
|
||||
81
|
||||
82
|
||||
83
|
||||
84
|
||||
85
|
||||
86
|
||||
87
|
||||
88
|
||||
89
|
||||
90
|
||||
91
|
||||
92
|
||||
93
|
||||
94
|
||||
95
|
||||
96</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 23</span>
|
||||
@@ -144,6 +211,73 @@ class cd_fail2ban::main::files (
|
||||
|
||||
require cd_fail2ban::main::dirs
|
||||
|
||||
if $fn_manage_config == true {
|
||||
|
||||
# manage fail2ban.conf
|
||||
|
||||
file { $fn_fail2ban_conf_file:
|
||||
ensure => present,
|
||||
path => $fn_fail2ban_conf_file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($fn_fail2ban_conf_erb),
|
||||
notify => Service[$fn_service],
|
||||
}
|
||||
|
||||
# manage fail2ban.local
|
||||
|
||||
file { $fn_fail2ban_local_file:
|
||||
ensure => present,
|
||||
path => $fn_fail2ban_local_file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($fn_fail2ban_local_erb),
|
||||
notify => Service[$fn_service],
|
||||
}
|
||||
|
||||
# manage jail.conf
|
||||
|
||||
file { $fn_jail_conf_file:
|
||||
ensure => present,
|
||||
path => $fn_jail_conf_file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($fn_jail_conf_erb),
|
||||
notify => Service[$fn_service],
|
||||
}
|
||||
|
||||
# manage jail.local
|
||||
|
||||
file { $fn_jail_local_file:
|
||||
ensure => present,
|
||||
path => $fn_jail_local_file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($fn_jail_local_erb),
|
||||
notify => Service[$fn_service],
|
||||
}
|
||||
|
||||
}
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
@@ -152,7 +286,7 @@ class cd_fail2ban::main::files (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 18:32:56 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -159,7 +159,7 @@ class cd_fail2ban::main::install (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 18:32:56 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -139,7 +139,8 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
32
|
||||
33
|
||||
34
|
||||
35</pre>
|
||||
35
|
||||
36</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/service.pp', line 23</span>
|
||||
@@ -151,11 +152,12 @@ class cd_fail2ban::main::service (
|
||||
require cd_fail2ban::main::files
|
||||
|
||||
service { $fn_service:
|
||||
ensure => running,
|
||||
ensure => $fn_enable_service,
|
||||
hasstatus => true,
|
||||
hasrestart => true,
|
||||
enable => true,
|
||||
}
|
||||
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
@@ -164,7 +166,7 @@ class cd_fail2ban::main::service (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 18:32:57 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -126,7 +126,9 @@ for more details.</p>
|
||||
<p>You should have received a copy of the GNU General Public License
|
||||
along
|
||||
with this program. If not, see <a
|
||||
href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.
|
||||
<code>CRITICAL</code>,<code>ERROR</code>,<code>WARNING</code>,<code>NOTICE</code>,<code>INFO</code>
|
||||
and <code>DEBUG</code>.</p>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
@@ -156,15 +158,560 @@ to choose, i.e. <code>latest</code> or <code>present</code>.</p>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_enable_fail2ban</span>
|
||||
<span class='name'>fn_manage_config</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>boolean</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>true</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Whether to manage the fail2ban
|
||||
configuration files. If set to false,
|
||||
fail2ban will be installed, but the
|
||||
configuration will not be managed.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_enable_service</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'running'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Whether to enable/start or disable/stop
|
||||
the fail2ban service. Valid options
|
||||
are <code>running</code> or <code>stopped</code>.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_loglevel</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'INFO'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the log level output. Valid options are</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_logtarget</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'SYSLOG'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the log target. This could be a file,
|
||||
SYSLOG, STDERR or STDOUT. Only
|
||||
one log target can be specified.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_syslogsocket</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'auto'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the syslog socket file. Only used when
|
||||
logtarget is SYSLOG. auto uses
|
||||
platform.system() to determine predefined
|
||||
paths Valid options: [ auto |
|
||||
FILE ].</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_socket</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'/var/run/fail2ban/fail2ban.sock'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the socket file to communicate with the daemon.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_pidfile</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'/var/run/fail2ban/fail2ban.pid'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the PID file to store the process ID of the
|
||||
fail2ban server.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_dbfile</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'/var/lib/fail2ban/fail2ban.sqlite3'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>file for the fail2ban persistent data to be stored.
|
||||
A value of
|
||||
":memory:" means database is only stored in memory
|
||||
and data is
|
||||
lost when fail2ban is stopped.
|
||||
A value of "None" disables the
|
||||
database.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_dbpurgeage</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'86400'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>age in seconds at which bans should be purged
|
||||
from the database.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_ignoreip</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'127.0.0.1/8'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>can be an IP address, a CIDR mask or a DNS host.
|
||||
Fail2ban will not ban a
|
||||
host which matches an address in this list. Several
|
||||
addresses can be
|
||||
defined using space (and/or comma) separator.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_ignorecommand</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>External command that will take an
|
||||
tagged arguments to ignore, e.g.
|
||||
<ip>,and return true if the IP is to be
|
||||
ignored. False otherwise.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_bantime</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'600'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>number of seconds that a host is banned.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_findtime</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'600'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>A host is banned if it has generated “maxretry”
|
||||
during the last
|
||||
"findtime" seconds.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_maxretry</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'5'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>number of failures before a host get banned.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_backend</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'auto'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>specifies the backend used to get files
|
||||
modification. options are
|
||||
"pyinotify", "gamin", "polling",
|
||||
"systemd" and
|
||||
"auto".
|
||||
pyinotify: requires pyinotify (a
|
||||
file alteration monitor) to be installed.
|
||||
If pyinotify is not installed,
|
||||
Fail2ban will use auto.
|
||||
gamin: requires Gamin (a file alteration monitor)
|
||||
to be installed.
|
||||
If Gamin is not installed, Fail2ban will use
|
||||
auto.
|
||||
polling: uses a polling algorithm which does not require external
|
||||
libraries.
|
||||
systemd: uses systemd python library to access the systemd
|
||||
journal.
|
||||
Specifying "logpath" is not valid for this backend.
|
||||
|
||||
See "journalmatch" in the jails associated filter config
|
||||
auto:
|
||||
will try to use the following backends, in order:
|
||||
pyinotify, gamin,
|
||||
polling.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_usedns</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'warn'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>specifies if jails should trust hostnames in logs,
|
||||
warn when DNS lookups
|
||||
are performed, or ignore all hostnames in logs
|
||||
yes: if a hostname is
|
||||
encountered, a DNS lookup will be performed.
|
||||
warn: if a hostname is
|
||||
encountered, a DNS lookup will be performed,
|
||||
but it will be logged as a
|
||||
warning.
|
||||
no: if a hostname is encountered, will not be used for banning,
|
||||
|
||||
but it will be logged as info.
|
||||
raw: use raw value (no hostname), allow use
|
||||
it for no-host filters/actions
|
||||
(example user)</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_logencoding</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'auto'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>specifies the encoding of the log files
|
||||
handled by the jail This is used to
|
||||
decode the lines from the log file.
|
||||
Typical examples: "ascii",
|
||||
"utf-8"
|
||||
auto: will use the system locale setting</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_enabled</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'false'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>enables the jails.
|
||||
By default all jails are disabled, and it should stay
|
||||
this way.
|
||||
Enable only relevant to your setup jails in your .local or
|
||||
jail.d/*.conf
|
||||
true: jail will be enabled and log files will get monitored
|
||||
for changes
|
||||
false: jail is not enabled</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_filter</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'%(__name__)s'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>defines the filter to use by the jail.
|
||||
By default jails have names matching
|
||||
their filter name</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_destemail</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'root@localhost'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Destination email address used solely for the
|
||||
interpolations in
|
||||
jail.conf,local,d/* configuration files.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_sender</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'root@localhost'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Sender email address used solely for some actions</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_mta</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'sendmail'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>E-mail action. Since 0.8.1 Fail2Ban uses sendmail MTA
|
||||
for the mailing.
|
||||
Change mta configuration parameter to mail if you want to
|
||||
revert to
|
||||
conventional 'mail'.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_protocol</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'tcp'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Default protocol.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_chain</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'INPUT'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Specify chain where jumps would need to be added in
|
||||
iptables-* actions.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_port</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'0:65535'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<h1 id="label-Ports+to+be+banned+Usually+should+be+overridden">Ports to be banned Usually should be overridden</h1>
|
||||
|
||||
<p>in a particular jail</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_fail2ban_agent</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'Fail2Ban/%(fail2ban_version)s'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Format of user-agent
|
||||
<a
|
||||
href="https://tools.ietf.org/html/rfc7231#section-5.5.3">tools.ietf.org/html/rfc7231#section-5.5.3</a></p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
</ul>
|
||||
@@ -177,46 +724,166 @@ to choose, i.e. <code>latest</code> or <code>present</code>.</p>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
27
|
||||
28
|
||||
29
|
||||
30
|
||||
31
|
||||
32
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41
|
||||
42
|
||||
43
|
||||
44
|
||||
45
|
||||
46
|
||||
47</pre>
|
||||
104
|
||||
105
|
||||
106
|
||||
107
|
||||
108
|
||||
109
|
||||
110
|
||||
111
|
||||
112
|
||||
113
|
||||
114
|
||||
115
|
||||
116
|
||||
117
|
||||
118
|
||||
119
|
||||
120
|
||||
121
|
||||
122
|
||||
123
|
||||
124
|
||||
125
|
||||
126
|
||||
127
|
||||
128
|
||||
129
|
||||
130
|
||||
131
|
||||
132
|
||||
133
|
||||
134
|
||||
135
|
||||
136
|
||||
137
|
||||
138
|
||||
139
|
||||
140
|
||||
141
|
||||
142
|
||||
143
|
||||
144
|
||||
145
|
||||
146
|
||||
147
|
||||
148
|
||||
149
|
||||
150
|
||||
151
|
||||
152
|
||||
153
|
||||
154
|
||||
155
|
||||
156
|
||||
157
|
||||
158
|
||||
159
|
||||
160
|
||||
161
|
||||
162
|
||||
163
|
||||
164
|
||||
165
|
||||
166
|
||||
167
|
||||
168
|
||||
169
|
||||
170
|
||||
171
|
||||
172
|
||||
173
|
||||
174
|
||||
175
|
||||
176
|
||||
177
|
||||
178
|
||||
179
|
||||
180
|
||||
181
|
||||
182
|
||||
183
|
||||
184</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 27</span>
|
||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 104</span>
|
||||
|
||||
class cd_fail2ban::params (
|
||||
|
||||
$pkg_ensure = 'latest',
|
||||
$pkg_ensure = 'latest',
|
||||
|
||||
$fn_manage_config = true,
|
||||
$fn_enable_service = 'running',
|
||||
|
||||
# fail2ban.conf/local
|
||||
|
||||
$fn_loglevel = 'INFO',
|
||||
$fn_logtarget = 'SYSLOG',
|
||||
$fn_syslogsocket = 'auto',
|
||||
$fn_socket = '/var/run/fail2ban/fail2ban.sock',
|
||||
$fn_pidfile = '/var/run/fail2ban/fail2ban.pid',
|
||||
$fn_dbfile = '/var/lib/fail2ban/fail2ban.sqlite3',
|
||||
$fn_dbpurgeage = '86400',
|
||||
|
||||
# jail.conf/local
|
||||
$fn_ignoreip = '127.0.0.1/8',
|
||||
$fn_ignorecommand = '',
|
||||
$fn_bantime = '600',
|
||||
$fn_findtime = '600',
|
||||
$fn_maxretry = '5',
|
||||
$fn_backend = 'auto',
|
||||
$fn_usedns = 'warn',
|
||||
$fn_logencoding = 'auto',
|
||||
$fn_enabled = 'false',
|
||||
$fn_filter = '%(__name__)s',
|
||||
$fn_destemail = 'root@localhost',
|
||||
$fn_sender = 'root@localhost',
|
||||
$fn_mta = 'sendmail',
|
||||
$fn_protocol = 'tcp',
|
||||
$fn_chain = 'INPUT',
|
||||
$fn_port = '0:65535',
|
||||
$fn_fail2ban_agent = 'Fail2Ban/%(fail2ban_version)s',
|
||||
|
||||
$fn_enable_fail2ban = true,
|
||||
|
||||
) {
|
||||
|
||||
# installation section
|
||||
$reqpackages = $::operatingsystem ? {
|
||||
/(?i-mx:centos|fedora|redhat)/ => ['fail2ban'],
|
||||
$reqpackages = $::operatingsystem ? {
|
||||
/(?i-mx:centos|fedora|redhat)/ => ['fail2ban','fail2ban-firewalld',
|
||||
'fail2ban-sendmail',
|
||||
'fail2ban-server.noarch','jwhois'],
|
||||
}
|
||||
|
||||
$fn_jail_paths = $::operatingsystem ? {
|
||||
/(?i-mx:centos|fedora|redhat)/ => 'fedora',
|
||||
}
|
||||
|
||||
# shortcuts
|
||||
$fn_os = $::operatingsystem
|
||||
|
||||
# service
|
||||
$fn_service = 'fail2ban'
|
||||
$fn_service = 'fail2ban'
|
||||
|
||||
# directories
|
||||
$fn_main_dir = '/etc/fail2ban'
|
||||
$fn_action_d_dir = "${fn_main_dir}/action.d"
|
||||
$fn_fail2ban_d_dir = "${fn_main_dir}/fail2ban.d"
|
||||
$fn_filter_d_dir = "${fn_main_dir}/filter.d"
|
||||
$fn_jail_d_dir = "${fn_main_dir}/jail.d"
|
||||
$fn_var_lib_dir = '/var/lib/fail2ban'
|
||||
$fn_var_run_dir = '/var/run/fail2ban'
|
||||
|
||||
# files
|
||||
$fn_fail2ban_conf_file = "${fn_main_dir}/fail2ban.conf"
|
||||
$fn_fail2ban_conf_erb = 'cd_fail2ban/fail2ban_conf.erb'
|
||||
$fn_fail2ban_local_file = "${fn_main_dir}/fail2ban.local"
|
||||
$fn_fail2ban_local_erb = 'cd_fail2ban/fail2ban_local.erb'
|
||||
$fn_jail_conf_file = "${fn_main_dir}/jail.conf"
|
||||
$fn_jail_conf_erb = 'cd_fail2ban/jail_conf.erb'
|
||||
$fn_jail_local_file = "${fn_main_dir}/jail.local"
|
||||
$fn_jail_local_erb = 'cd_fail2ban/jail_local.erb'
|
||||
|
||||
|
||||
# includes must be last
|
||||
|
||||
@@ -230,7 +897,7 @@ $fn_service = 'fail2ban'
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 18:32:56 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -90,7 +90,7 @@
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 18:32:55 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -4,3 +4,4 @@
|
||||
./.yardoc/objects/root.dat: data
|
||||
./doc/css/style.css: HTML document, UTF-8 Unicode text, with very long lines
|
||||
./doc/js/jquery.js: HTML document, UTF-8 Unicode text, with very long lines
|
||||
./doc/puppet_classes/cd_fail2ban_3A_3Aparams.html: HTML document, UTF-8 Unicode text
|
||||
|
||||
Reference in New Issue
Block a user