Merge branch 'master' of gitlab.puppetsoft.com:12ww1160/cd_fail2ban into HEAD
This commit is contained in:
Jenkins Server
54
CHANGELOG.md
54
CHANGELOG.md
@@ -8,9 +8,59 @@ Changelog of Git Changelog.
|
||||
<h2> No issue </h2>
|
||||
|
||||
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/dc918f331ab225f">dc918f331ab225f</a> Arne Teuke <i>2017-08-03 11:01:32</i>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/8c3df7530a1ab21">8c3df7530a1ab21</a> Arne Teuke <i>2017-08-03 14:51:29</i>
|
||||
<p>
|
||||
<h3>initial commit</h3>
|
||||
<h3>added controls for main conf/local files</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/21086d1f714fd6a">21086d1f714fd6a</a> Jenkins Server <i>2017-08-03 14:51:10</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 8</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/202c50762d6411e">202c50762d6411e</a> Arne Teuke <i>2017-08-03 14:29:17</i>
|
||||
<p>
|
||||
<h3>added controls for main conf/local files</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/a22f3fb29e72361">a22f3fb29e72361</a> Jenkins Server <i>2017-08-03 14:28:57</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 7</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/3fdfda26d55dc96">3fdfda26d55dc96</a> Jenkins Server <i>2017-08-03 13:10:45</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 6</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/fdf29a4e38ba36a">fdf29a4e38ba36a</a> Arne Teuke <i>2017-08-03 13:09:41</i>
|
||||
<p>
|
||||
<h3>added directory control</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/3c581b56cc82cb9">3c581b56cc82cb9</a> Arne Teuke <i>2017-08-03 13:01:25</i>
|
||||
<p>
|
||||
<h3>added directory control</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/ab94577ae7093a2">ab94577ae7093a2</a> Jenkins Server <i>2017-08-03 13:01:03</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 4</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/82035d505ca0352">82035d505ca0352</a> Arne Teuke <i>2017-08-03 12:13:00</i>
|
||||
<p>
|
||||
<h3>added service control</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/423db4a35427180">423db4a35427180</a> Jenkins Server <i>2017-08-03 12:12:32</i>
|
||||
<p>
|
||||
<h3>recommit for updates in build 3</h3>
|
||||
|
||||
</p>
|
||||
<a href="https://gitlab.puppetsoft.com/12WW1160/git-changelog-lib/commit/059e16bca627858">059e16bca627858</a> Arne Teuke <i>2017-08-03 12:07:42</i>
|
||||
<p>
|
||||
<h3>added service control</h3>
|
||||
|
||||
</p>
|
||||
|
||||
|
||||
@@ -1,4 +1,27 @@
|
||||
.
|
||||
|-- doc
|
||||
| |-- css
|
||||
| | |-- common.css
|
||||
| | |-- full_list.css
|
||||
| | `-- style.css
|
||||
| |-- js
|
||||
| | |-- app.js
|
||||
| | |-- full_list.js
|
||||
| | `-- jquery.js
|
||||
| |-- puppet_classes
|
||||
| | |-- cd_fail2ban_3A_3Amain_3A_3Aconfig.html
|
||||
| | |-- cd_fail2ban_3A_3Amain_3A_3Adirs.html
|
||||
| | |-- cd_fail2ban_3A_3Amain_3A_3Afiles.html
|
||||
| | |-- cd_fail2ban_3A_3Amain_3A_3Ainstall.html
|
||||
| | |-- cd_fail2ban_3A_3Amain_3A_3Aservice.html
|
||||
| | |-- cd_fail2ban_3A_3Aparams.html
|
||||
| | `-- cd_fail2ban.html
|
||||
| |-- file.README.html
|
||||
| |-- frames.html
|
||||
| |-- _index.html
|
||||
| |-- index.html
|
||||
| |-- puppet_class_list.html
|
||||
| `-- top-level-namespace.html
|
||||
|-- manifests
|
||||
| |-- main
|
||||
| | |-- config.pp
|
||||
@@ -8,10 +31,17 @@
|
||||
| | `-- service.pp
|
||||
| |-- init.pp
|
||||
| `-- params.pp
|
||||
|-- templates
|
||||
| |-- fail2ban_conf.erb
|
||||
| `-- fail2ban_local.erb
|
||||
|-- tests
|
||||
| `-- UTF_Files
|
||||
|-- CHANGELOG.md
|
||||
|-- Gemfile
|
||||
|-- Gemfile.lock
|
||||
|-- Jenkinsfile
|
||||
|-- LICENSE
|
||||
`-- README.md
|
||||
|-- README.md
|
||||
`-- REPOSTRUCTURE.md
|
||||
|
||||
2 directories, 12 files
|
||||
8 directories, 36 files
|
||||
|
||||
@@ -132,7 +132,7 @@
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:29 2017 by
|
||||
Generated on Thu Aug 3 16:55:35 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -61,7 +61,7 @@
|
||||
<p>|Repo Name| version | Build
|
||||
Status|
|
||||
|---|---|---|---|
|
||||
|<code>cd_fail2ban</code>| 0.0.0.2 | <a
|
||||
|<code>cd_fail2ban</code>| 0.0.0.4 | <a
|
||||
href="https://jenkins.confdroid.com/buildStatus/icon?job=cd_fail2ban">{Build
|
||||
Status</a>/]|</p>
|
||||
|
||||
@@ -128,6 +128,15 @@ href="https://gitlab.puppetsoft.com/12WW1160/cd_fail2ban/blob/master/CHANGELOG.m
|
||||
<p>Installation
|
||||
* install required binaries</p>
|
||||
|
||||
<p>Configuration
|
||||
* manage directory structure (file system permissions,
|
||||
selinux context)
|
||||
* manage configration files (file system permissions,
|
||||
selinux context, content based on parameters)</p>
|
||||
|
||||
<p>Service
|
||||
* manage service status (running or stopped)</p>
|
||||
|
||||
<h3 id="label-Repo+Structure">Repo Structure</h3>
|
||||
|
||||
<p>Repostructure has moved to REPOSTRUCTURE.md in repo.</p>
|
||||
@@ -184,6 +193,10 @@ right out of box as is.</p>
|
||||
selinux is disabled, these contexts are ignored.</p>
|
||||
|
||||
<h3 id="label-Known+Problems">Known Problems</h3>
|
||||
<ul><li>
|
||||
<p>firewalld: firewalld is auto-installed on CentOS7 as dependency of fail2ban
|
||||
by yum.</p>
|
||||
</li></ul>
|
||||
|
||||
<h3 id="label-Support">Support</h3>
|
||||
<ul><li>
|
||||
@@ -238,7 +251,7 @@ environments.</p>
|
||||
</div></div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 16:55:36 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -61,7 +61,7 @@
|
||||
<p>|Repo Name| version | Build
|
||||
Status|
|
||||
|---|---|---|---|
|
||||
|<code>cd_fail2ban</code>| 0.0.0.2 | <a
|
||||
|<code>cd_fail2ban</code>| 0.0.0.4 | <a
|
||||
href="https://jenkins.confdroid.com/buildStatus/icon?job=cd_fail2ban">{Build
|
||||
Status</a>/]|</p>
|
||||
|
||||
@@ -128,6 +128,15 @@ href="https://gitlab.puppetsoft.com/12WW1160/cd_fail2ban/blob/master/CHANGELOG.m
|
||||
<p>Installation
|
||||
* install required binaries</p>
|
||||
|
||||
<p>Configuration
|
||||
* manage directory structure (file system permissions,
|
||||
selinux context)
|
||||
* manage configration files (file system permissions,
|
||||
selinux context, content based on parameters)</p>
|
||||
|
||||
<p>Service
|
||||
* manage service status (running or stopped)</p>
|
||||
|
||||
<h3 id="label-Repo+Structure">Repo Structure</h3>
|
||||
|
||||
<p>Repostructure has moved to REPOSTRUCTURE.md in repo.</p>
|
||||
@@ -184,6 +193,10 @@ right out of box as is.</p>
|
||||
selinux is disabled, these contexts are ignored.</p>
|
||||
|
||||
<h3 id="label-Known+Problems">Known Problems</h3>
|
||||
<ul><li>
|
||||
<p>firewalld: firewalld is auto-installed on CentOS7 as dependency of fail2ban
|
||||
by yum.</p>
|
||||
</li></ul>
|
||||
|
||||
<h3 id="label-Support">Support</h3>
|
||||
<ul><li>
|
||||
@@ -238,7 +251,7 @@ environments.</p>
|
||||
</div></div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:29 2017 by
|
||||
Generated on Thu Aug 3 16:55:36 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -139,7 +139,7 @@ class cd_fail2ban {
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 16:55:36 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -134,8 +134,7 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
27
|
||||
28
|
||||
29
|
||||
30
|
||||
31</pre>
|
||||
30</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 24</span>
|
||||
@@ -144,9 +143,8 @@ class cd_fail2ban::main::config (
|
||||
|
||||
) inherits cd_fail2ban::params {
|
||||
|
||||
if $fn_enable_fail2ban == true {
|
||||
include cd_fail2ban::main::service
|
||||
}
|
||||
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
@@ -155,7 +153,7 @@ class cd_fail2ban::main::config (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 16:55:37 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -86,24 +86,21 @@
|
||||
<p>cd_fail2ban::main::dirs.pp
|
||||
Module name: cd_fail2ban
|
||||
Author: Arne Teuke
|
||||
(arne_teuke@ConfDroid.com)</p>
|
||||
(arne_teuke@confdroid.com)
|
||||
License:
|
||||
This file is part of cd_fail2ban.</p>
|
||||
|
||||
<h1 id="label-License%3A">License:</h1>
|
||||
<p>cd_fail2ban is used for providing automatic configuration of Fail2Ban
|
||||
|
||||
<p>This file is part of cd_fail2ban.</p>
|
||||
|
||||
<p>cd_fail2ban is used for providing automatic configuration of
|
||||
<service /
|
||||
purpose>
|
||||
Copyright (C) 2016 ConfDroid (copyright@ConfDroid.com)
|
||||
This
|
||||
program is free software: you can redistribute it and/or modify
|
||||
it under
|
||||
the terms of the GNU General Public License as published by
|
||||
the Free
|
||||
Software Foundation, either version 3 of the License, or
|
||||
(at your option)
|
||||
any later version.</p>
|
||||
Copyright (C) 2017 confdroid (copyright@confdroid.com)
|
||||
This program is
|
||||
free software: you can redistribute it and/or modify
|
||||
it under the terms of
|
||||
the GNU General Public License as published by
|
||||
the Free Software
|
||||
Foundation, either version 3 of the License, or
|
||||
(at your option) any later
|
||||
version.</p>
|
||||
|
||||
<p>This program is distributed in the hope that it will be useful,
|
||||
but
|
||||
@@ -130,6 +127,7 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
23
|
||||
24
|
||||
25
|
||||
26
|
||||
@@ -138,10 +136,106 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
29
|
||||
30
|
||||
31
|
||||
32</pre>
|
||||
32
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41
|
||||
42
|
||||
43
|
||||
44
|
||||
45
|
||||
46
|
||||
47
|
||||
48
|
||||
49
|
||||
50
|
||||
51
|
||||
52
|
||||
53
|
||||
54
|
||||
55
|
||||
56
|
||||
57
|
||||
58
|
||||
59
|
||||
60
|
||||
61
|
||||
62
|
||||
63
|
||||
64
|
||||
65
|
||||
66
|
||||
67
|
||||
68
|
||||
69
|
||||
70
|
||||
71
|
||||
72
|
||||
73
|
||||
74
|
||||
75
|
||||
76
|
||||
77
|
||||
78
|
||||
79
|
||||
80
|
||||
81
|
||||
82
|
||||
83
|
||||
84
|
||||
85
|
||||
86
|
||||
87
|
||||
88
|
||||
89
|
||||
90
|
||||
91
|
||||
92
|
||||
93
|
||||
94
|
||||
95
|
||||
96
|
||||
97
|
||||
98
|
||||
99
|
||||
100
|
||||
101
|
||||
102
|
||||
103
|
||||
104
|
||||
105
|
||||
106
|
||||
107
|
||||
108
|
||||
109
|
||||
110
|
||||
111
|
||||
112
|
||||
113
|
||||
114
|
||||
115
|
||||
116
|
||||
117
|
||||
118
|
||||
119
|
||||
120
|
||||
121
|
||||
122
|
||||
123
|
||||
124
|
||||
125
|
||||
126
|
||||
127
|
||||
128</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 24</span>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 23</span>
|
||||
|
||||
class cd_fail2ban::main::dirs (
|
||||
|
||||
@@ -149,6 +243,103 @@ class cd_fail2ban::main::dirs (
|
||||
|
||||
require cd_fail2ban::main::install
|
||||
|
||||
# manage main dir
|
||||
|
||||
file { $fn_main_dir:
|
||||
ensure => directory,
|
||||
path => $fn_main_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage action.d dir
|
||||
|
||||
file { $fn_action_d_dir:
|
||||
ensure => directory,
|
||||
path => $fn_action_d_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage fail2ban.d dir
|
||||
|
||||
file { $fn_fail2ban_d_dir:
|
||||
ensure => directory,
|
||||
path => $fn_fail2ban_d_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage filter.d dir
|
||||
|
||||
file { $fn_filter_d_dir:
|
||||
ensure => directory,
|
||||
path => $fn_filter_d_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage jail.d dir
|
||||
|
||||
file { $fn_jail_d_dir:
|
||||
ensure => directory,
|
||||
path => $fn_jail_d_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage /var/lib/fail2ban
|
||||
|
||||
file { $fn_var_lib_dir:
|
||||
ensure => directory,
|
||||
path => $fn_var_lib_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => fail2ban_var_lib_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage /var/run/fail2bam
|
||||
|
||||
file { $fn_var_run_dir:
|
||||
ensure => directory,
|
||||
path => $fn_var_run_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => fail2ban_var_run_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
|
||||
}</pre>
|
||||
@@ -159,7 +350,7 @@ class cd_fail2ban::main::dirs (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 16:55:37 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -133,7 +133,42 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
26
|
||||
27
|
||||
28
|
||||
29</pre>
|
||||
29
|
||||
30
|
||||
31
|
||||
32
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41
|
||||
42
|
||||
43
|
||||
44
|
||||
45
|
||||
46
|
||||
47
|
||||
48
|
||||
49
|
||||
50
|
||||
51
|
||||
52
|
||||
53
|
||||
54
|
||||
55
|
||||
56
|
||||
57
|
||||
58
|
||||
59
|
||||
60
|
||||
61
|
||||
62
|
||||
63
|
||||
64</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 23</span>
|
||||
@@ -144,6 +179,41 @@ class cd_fail2ban::main::files (
|
||||
|
||||
require cd_fail2ban::main::dirs
|
||||
|
||||
if $fn_manage_config == true {
|
||||
|
||||
# manage fail2ban.conf
|
||||
|
||||
file { $fn_fail2ban_conf_file:
|
||||
ensure => present,
|
||||
path => $fn_fail2ban_conf_file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($fn_fail2ban_conf_erb),
|
||||
notify => Service[$fn_service],
|
||||
}
|
||||
|
||||
# manage fail2ban.local
|
||||
|
||||
file { $fn_fail2ban_local_file:
|
||||
ensure => present,
|
||||
path => $fn_fail2ban_local_file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($fn_fail2ban_local_erb),
|
||||
notify => Service[$fn_service],
|
||||
}
|
||||
|
||||
}
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
@@ -152,7 +222,7 @@ class cd_fail2ban::main::files (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 16:55:37 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -159,7 +159,7 @@ class cd_fail2ban::main::install (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 16:55:37 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -139,7 +139,8 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
32
|
||||
33
|
||||
34
|
||||
35</pre>
|
||||
35
|
||||
36</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/service.pp', line 23</span>
|
||||
@@ -151,11 +152,12 @@ class cd_fail2ban::main::service (
|
||||
require cd_fail2ban::main::files
|
||||
|
||||
service { $fn_service:
|
||||
ensure => running,
|
||||
ensure => $fn_enable_service,
|
||||
hasstatus => true,
|
||||
hasrestart => true,
|
||||
enable => true,
|
||||
}
|
||||
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
@@ -164,7 +166,7 @@ class cd_fail2ban::main::service (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 16:55:37 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -126,7 +126,9 @@ for more details.</p>
|
||||
<p>You should have received a copy of the GNU General Public License
|
||||
along
|
||||
with this program. If not, see <a
|
||||
href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.
|
||||
<code>CRITICAL</code>,<code>ERROR</code>,<code>WARNING</code>,<code>NOTICE</code>,<code>INFO</code>
|
||||
and <code>DEBUG</code>.</p>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
@@ -156,15 +158,183 @@ to choose, i.e. <code>latest</code> or <code>present</code>.</p>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_enable_fail2ban</span>
|
||||
<span class='name'>fn_manage_config</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>boolean</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>true</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Whether to manage the fail2ban
|
||||
configuration files. If set to false,
|
||||
fail2ban will be installed, but the
|
||||
configuration will not be managed.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_enable_service</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'running'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Whether to enable/start or disable/stop
|
||||
the fail2ban service. Valid options
|
||||
are <code>running</code> or <code>stopped</code>.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_loglevel</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'INFO'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the log level output. Valid options are</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_logtarget</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'SYSLOG'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the log target. This could be a file,
|
||||
SYSLOG, STDERR or STDOUT. Only
|
||||
one log target can be specified.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_syslogsocket</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'auto'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the syslog socket file. Only used when
|
||||
logtarget is SYSLOG. auto uses
|
||||
platform.system() to determine predefined
|
||||
paths Valid options: [ auto |
|
||||
FILE ].</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_socket</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'/var/run/fail2ban/fail2ban.sock'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the socket file to communicate with the daemon.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_pidfile</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'/var/run/fail2ban/fail2ban.pid'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the PID file to store the process ID of the
|
||||
fail2ban server.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_dbfile</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'/var/lib/fail2ban/fail2ban.sqlite3'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>file for the fail2ban persistent data to be stored.
|
||||
A value of
|
||||
":memory:" means database is only stored in memory
|
||||
and data is
|
||||
lost when fail2ban is stopped.
|
||||
A value of "None" disables the
|
||||
database.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_dbpurgeage</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'86400'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>age in seconds at which bans should be purged
|
||||
from the database.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
</ul>
|
||||
@@ -177,46 +347,100 @@ to choose, i.e. <code>latest</code> or <code>present</code>.</p>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
27
|
||||
28
|
||||
29
|
||||
30
|
||||
31
|
||||
32
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41
|
||||
42
|
||||
43
|
||||
44
|
||||
45
|
||||
46
|
||||
47</pre>
|
||||
48
|
||||
49
|
||||
50
|
||||
51
|
||||
52
|
||||
53
|
||||
54
|
||||
55
|
||||
56
|
||||
57
|
||||
58
|
||||
59
|
||||
60
|
||||
61
|
||||
62
|
||||
63
|
||||
64
|
||||
65
|
||||
66
|
||||
67
|
||||
68
|
||||
69
|
||||
70
|
||||
71
|
||||
72
|
||||
73
|
||||
74
|
||||
75
|
||||
76
|
||||
77
|
||||
78
|
||||
79
|
||||
80
|
||||
81
|
||||
82
|
||||
83
|
||||
84
|
||||
85
|
||||
86
|
||||
87
|
||||
88
|
||||
89
|
||||
90
|
||||
91
|
||||
92
|
||||
93
|
||||
94
|
||||
95</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 27</span>
|
||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 48</span>
|
||||
|
||||
class cd_fail2ban::params (
|
||||
|
||||
$pkg_ensure = 'latest',
|
||||
$pkg_ensure = 'latest',
|
||||
|
||||
$fn_manage_config = true,
|
||||
$fn_enable_service = 'running',
|
||||
$fn_loglevel = 'INFO',
|
||||
$fn_logtarget = 'SYSLOG',
|
||||
$fn_syslogsocket = 'auto',
|
||||
$fn_socket = '/var/run/fail2ban/fail2ban.sock',
|
||||
$fn_pidfile = '/var/run/fail2ban/fail2ban.pid',
|
||||
$fn_dbfile = '/var/lib/fail2ban/fail2ban.sqlite3',
|
||||
$fn_dbpurgeage = '86400',
|
||||
|
||||
$fn_enable_fail2ban = true,
|
||||
|
||||
) {
|
||||
|
||||
# installation section
|
||||
$reqpackages = $::operatingsystem ? {
|
||||
/(?i-mx:centos|fedora|redhat)/ => ['fail2ban'],
|
||||
/(?i-mx:centos|fedora|redhat)/ => ['fail2ban','fail2ban-firewalld',
|
||||
'fail2ban-sendmail',
|
||||
'fail2ban-server.noarch'],
|
||||
}
|
||||
|
||||
|
||||
# service
|
||||
$fn_service = 'fail2ban'
|
||||
$fn_service = 'fail2ban'
|
||||
|
||||
# directories
|
||||
$fn_main_dir = '/etc/fail2ban'
|
||||
$fn_action_d_dir = "${fn_main_dir}/action.d"
|
||||
$fn_fail2ban_d_dir = "${fn_main_dir}/fail2ban.d"
|
||||
$fn_filter_d_dir = "${fn_main_dir}/filter.d"
|
||||
$fn_jail_d_dir = "${fn_main_dir}/jail.d"
|
||||
$fn_var_lib_dir = '/var/lib/fail2ban'
|
||||
$fn_var_run_dir = '/var/run/fail2ban'
|
||||
|
||||
# files
|
||||
$fn_fail2ban_conf_file = "${fn_main_dir}/fail2ban.conf"
|
||||
$fn_fail2ban_conf_erb = 'cd_fail2ban/fail2ban_conf.erb'
|
||||
$fn_fail2ban_local_file = "${fn_main_dir}/fail2ban.local"
|
||||
$fn_fail2ban_local_erb = 'cd_fail2ban/fail2ban_local.erb'
|
||||
|
||||
# includes must be last
|
||||
|
||||
@@ -230,7 +454,7 @@ $fn_service = 'fail2ban'
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 16:55:37 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -90,7 +90,7 @@
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 14:12:30 2017 by
|
||||
Generated on Thu Aug 3 16:55:36 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
Reference in New Issue
Block a user