recommit for updates in build 7
This commit is contained in:
@@ -139,7 +139,7 @@ class cd_fail2ban {
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 15:10:43 2017 by
|
||||
Generated on Thu Aug 3 16:28:54 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -134,8 +134,7 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
27
|
||||
28
|
||||
29
|
||||
30
|
||||
31</pre>
|
||||
30</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 24</span>
|
||||
@@ -144,9 +143,8 @@ class cd_fail2ban::main::config (
|
||||
|
||||
) inherits cd_fail2ban::params {
|
||||
|
||||
if $fn_enable_fail2ban == true {
|
||||
include cd_fail2ban::main::service
|
||||
}
|
||||
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
@@ -155,7 +153,7 @@ class cd_fail2ban::main::config (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 15:10:43 2017 by
|
||||
Generated on Thu Aug 3 16:28:55 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -216,7 +216,23 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
109
|
||||
110
|
||||
111
|
||||
112</pre>
|
||||
112
|
||||
113
|
||||
114
|
||||
115
|
||||
116
|
||||
117
|
||||
118
|
||||
119
|
||||
120
|
||||
121
|
||||
122
|
||||
123
|
||||
124
|
||||
125
|
||||
126
|
||||
127
|
||||
128</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 23</span>
|
||||
@@ -310,6 +326,22 @@ class cd_fail2ban::main::dirs (
|
||||
seltype => fail2ban_var_lib_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# manage /var/run/fail2bam
|
||||
|
||||
file { $fn_var_run_dir:
|
||||
ensure => directory,
|
||||
path => $fn_var_run_dir,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => fail2ban_var_run_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
@@ -318,7 +350,7 @@ class cd_fail2ban::main::dirs (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 15:10:43 2017 by
|
||||
Generated on Thu Aug 3 16:28:54 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -133,7 +133,42 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
26
|
||||
27
|
||||
28
|
||||
29</pre>
|
||||
29
|
||||
30
|
||||
31
|
||||
32
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41
|
||||
42
|
||||
43
|
||||
44
|
||||
45
|
||||
46
|
||||
47
|
||||
48
|
||||
49
|
||||
50
|
||||
51
|
||||
52
|
||||
53
|
||||
54
|
||||
55
|
||||
56
|
||||
57
|
||||
58
|
||||
59
|
||||
60
|
||||
61
|
||||
62
|
||||
63
|
||||
64</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 23</span>
|
||||
@@ -144,6 +179,41 @@ class cd_fail2ban::main::files (
|
||||
|
||||
require cd_fail2ban::main::dirs
|
||||
|
||||
if $fn_manage_config == true {
|
||||
|
||||
# manage fail2ban.conf
|
||||
|
||||
file { $fn_fail2ban_conf_file:
|
||||
ensure => present,
|
||||
path => $fn_fail2ban_conf_file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($fn_fail2ban_conf_erb),
|
||||
notify => Service[$fn_service],
|
||||
}
|
||||
|
||||
# manage fail2ban.local
|
||||
|
||||
file { $fn_fail2ban_local_file:
|
||||
ensure => present,
|
||||
path => $fn_fail2ban_local_file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($fn_fail2ban_conf_erb),
|
||||
notify => Service[$fn_service],
|
||||
}
|
||||
|
||||
}
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
@@ -152,7 +222,7 @@ class cd_fail2ban::main::files (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 15:10:43 2017 by
|
||||
Generated on Thu Aug 3 16:28:54 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -159,7 +159,7 @@ class cd_fail2ban::main::install (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 15:10:43 2017 by
|
||||
Generated on Thu Aug 3 16:28:55 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -139,7 +139,8 @@ href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
32
|
||||
33
|
||||
34
|
||||
35</pre>
|
||||
35
|
||||
36</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/service.pp', line 23</span>
|
||||
@@ -151,11 +152,12 @@ class cd_fail2ban::main::service (
|
||||
require cd_fail2ban::main::files
|
||||
|
||||
service { $fn_service:
|
||||
ensure => running,
|
||||
ensure => $fn_enable_service,
|
||||
hasstatus => true,
|
||||
hasrestart => true,
|
||||
enable => true,
|
||||
}
|
||||
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
@@ -164,7 +166,7 @@ class cd_fail2ban::main::service (
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 15:10:43 2017 by
|
||||
Generated on Thu Aug 3 16:28:55 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
@@ -126,7 +126,9 @@ for more details.</p>
|
||||
<p>You should have received a copy of the GNU General Public License
|
||||
along
|
||||
with this program. If not, see <a
|
||||
href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.</p>
|
||||
href="http://www.gnu.org/licenses">www.gnu.org/licenses</a>/.
|
||||
<code>CRITICAL</code>,<code>ERROR</code>,<code>WARNING</code>,<code>NOTICE</code>,<code>INFO</code>
|
||||
and <code>DEBUG</code>.</p>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
@@ -156,15 +158,183 @@ to choose, i.e. <code>latest</code> or <code>present</code>.</p>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_enable_fail2ban</span>
|
||||
<span class='name'>fn_manage_config</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>boolean</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>true</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Whether to manage the fail2ban
|
||||
configuration files. If set to false,
|
||||
fail2ban will be installed, but the
|
||||
configuration will not be managed.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_enable_service</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'running'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Whether to enable/start or disable/stop
|
||||
the fail2ban service. Valid options
|
||||
are <code>running</code> or <code>stopped</code>.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_loglevel</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'INFO'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the log level output. Valid options are</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_logtarget</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'SYSLOG'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the log target. This could be a file,
|
||||
SYSLOG, STDERR or STDOUT. Only
|
||||
one log target can be specified.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_syslogsocket</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'auto'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the syslog socket file. Only used when
|
||||
logtarget is SYSLOG. auto uses
|
||||
platform.system() to determine predefined
|
||||
paths Valid options: [ auto |
|
||||
FILE ].</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_socket</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'/var/run/fail2ban/fail2ban.sock'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the socket file to communicate with the daemon.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_pidfile</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'/var/run/fail2ban/fail2ban.pid'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>Set the PID file to store the process ID of the
|
||||
fail2ban server.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_dbfile</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'/var/lib/fail2ban/fail2ban.sqlite3'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>file for the fail2ban persistent data to be stored.
|
||||
A value of
|
||||
":memory:" means database is only stored in memory
|
||||
and data is
|
||||
lost when fail2ban is stopped.
|
||||
A value of "None" disables the
|
||||
database.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fn_dbpurgeage</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'86400'</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>age in seconds at which bans should be purged
|
||||
from the database.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
</ul>
|
||||
@@ -177,27 +347,6 @@ to choose, i.e. <code>latest</code> or <code>present</code>.</p>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
27
|
||||
28
|
||||
29
|
||||
30
|
||||
31
|
||||
32
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41
|
||||
42
|
||||
43
|
||||
44
|
||||
45
|
||||
46
|
||||
47
|
||||
48
|
||||
49
|
||||
50
|
||||
@@ -212,16 +361,59 @@ to choose, i.e. <code>latest</code> or <code>present</code>.</p>
|
||||
59
|
||||
60
|
||||
61
|
||||
62</pre>
|
||||
62
|
||||
63
|
||||
64
|
||||
65
|
||||
66
|
||||
67
|
||||
68
|
||||
69
|
||||
70
|
||||
71
|
||||
72
|
||||
73
|
||||
74
|
||||
75
|
||||
76
|
||||
77
|
||||
78
|
||||
79
|
||||
80
|
||||
81
|
||||
82
|
||||
83
|
||||
84
|
||||
85
|
||||
86
|
||||
87
|
||||
88
|
||||
89
|
||||
90
|
||||
91
|
||||
92
|
||||
93
|
||||
94
|
||||
95
|
||||
96</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 27</span>
|
||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 48</span>
|
||||
|
||||
class cd_fail2ban::params (
|
||||
|
||||
$pkg_ensure = 'latest',
|
||||
$pkg_ensure = 'latest',
|
||||
|
||||
$fn_manage_config = true,
|
||||
$fn_enable_service = 'running',
|
||||
$fn_loglevel = 'INFO',
|
||||
$fn_logtarget = 'SYSLOG',
|
||||
$fn_syslogsocket = 'auto',
|
||||
$fn_socket = '/var/run/fail2ban/fail2ban.sock',
|
||||
$fn_pidfile = '/var/run/fail2ban/fail2ban.pid',
|
||||
$fn_dbfile = '/var/lib/fail2ban/fail2ban.sqlite3',
|
||||
$fn_dbpurgeage = '86400',
|
||||
|
||||
$fn_enable_fail2ban = true,
|
||||
|
||||
) {
|
||||
|
||||
@@ -235,18 +427,22 @@ $reqpackages = $::operatingsystem ? {
|
||||
|
||||
|
||||
# service
|
||||
$fn_service = 'fail2ban'
|
||||
$fn_service = 'fail2ban'
|
||||
|
||||
# directories
|
||||
$fn_main_dir = '/etc/fail2ban'
|
||||
$fn_action_d_dir = "${fn_main_dir}/action.d"
|
||||
$fn_fail2ban_d_dir = "${fn_main_dir}/fail2ban.d"
|
||||
$fn_filter_d_dir = "${fn_main_dir}/filter.d"
|
||||
$fn_jail_d_dir = "${fn_main_dir}/jail.d"
|
||||
$fn_var_lib_dir = '/var/lib/fail2ban'
|
||||
|
||||
$fn_main_dir = '/etc/fail2ban'
|
||||
$fn_action_d_dir = "${fn_main_dir}/action.d"
|
||||
$fn_fail2ban_d_dir = "${fn_main_dir}/fail2ban.d"
|
||||
$fn_filter_d_dir = "${fn_main_dir}/filter.d"
|
||||
$fn_jail_d_dir = "${fn_main_dir}/jail.d"
|
||||
$fn_var_lib_dir = '/var/lib/fail2ban'
|
||||
$fn_var_run_dir = '/var/run/fail2ban'
|
||||
|
||||
# files
|
||||
$fn_fail2ban_conf_file = "${fn_main_dir}fail2ban.conf"
|
||||
$fn_fail2ban_conf_erb = 'cd_fail2ban/fail2ban_conf.erb'
|
||||
$fn_fail2ban_local_file = "${fn_main_dir}fail2ban.local"
|
||||
$fn_fail2ban_local_erb = 'cd_fail2ban/fail2ban_local.erb'
|
||||
|
||||
# includes must be last
|
||||
|
||||
@@ -260,7 +456,7 @@ $fn_var_lib_dir = '/var/lib/fail2ban'
|
||||
</div>
|
||||
|
||||
<div id="footer">
|
||||
Generated on Thu Aug 3 15:10:43 2017 by
|
||||
Generated on Thu Aug 3 16:28:54 2017 by
|
||||
<a href="http://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
|
||||
0.9.9 (ruby-2.0.0).
|
||||
</div>
|
||||
|
||||
Reference in New Issue
Block a user