confdroid/confdroid_fail2ban
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

OP#483 rewrite complete

Browse Source
This commit is contained in:
Arne Teuke
2026-03-11 12:17:01 +01:00
parent b048bd8f48
commit df88e9602e
1 changed files with 39 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

79
manifests/params.pp
View File

@@ -104,57 +104,56 @@
class confdroid_fail2ban::params (
# installation
String $fn_pkg_ensure = 'present',
Array $fn_reqpackages = ['fail2ban','fail2ban-firewalld',
String $fn_pkg_ensure = 'present',
Array $fn_reqpackages = ['fail2ban','fail2ban-firewalld',
'fail2ban-sendmail','fail2ban-server.noarch','whois'],
Boolean $fn_manage_config = true,
String $fn_enable_service = 'running',
Boolean $fn_manage_config = true,
String $fn_enable_service = 'running',
# fail2ban.conf/local
String $fn_loglevel = 'INFO',
String $fn_logtarget = 'SYSLOG',
String $fn_syslogsocket = 'auto',
String $fn_socket = '/var/run/fail2ban/fail2ban.sock',
String $fn_pidfile = '/var/run/fail2ban/fail2ban.pid',
String $fn_dbfile = '/var/lib/fail2ban/fail2ban.sqlite3',
String $fn_dbpurgeage = '86400',
String $fn_loglevel = 'INFO',
String $fn_logtarget = 'SYSLOG',
String $fn_syslogsocket = 'auto',
String $fn_socket = '/var/run/fail2ban/fail2ban.sock',
String $fn_pidfile = '/var/run/fail2ban/fail2ban.pid',
String $fn_dbfile = '/var/lib/fail2ban/fail2ban.sqlite3',
String $fn_dbpurgeage = '86400',
# jail.conf/local
String $fn_ignoreip = '127.0.0.1/8',
String $fn_ignorecommand = '',
String $fn_bantime = '600',
String $fn_findtime = '600',
String $fn_maxretry = '5',
String $fn_backend = 'auto',
String $fn_usedns = 'warn',
String $fn_logencoding = 'auto',
Boolean $fn_enabled = false,
String $fn_filter = '%(__name__)s',
String $fn_destemail = 'root@localhost',
#String $fn_sender = "fail2ban@${fqdn}",
String $fn_mta = 'sendmail',
String $fn_protocol = 'tcp',
String $fn_chain = 'INPUT',
String $fn_port = '0:65535',
String $fn_fail2ban_agent = 'Fail2Ban/%(fail2ban_version)s',
String $fn_banaction = 'iptables-multiport',
String $fn_banaction_allports = 'iptables-allports',
String $fn_action_ = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]',
String $fn_action_mw = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
String $fn_ignoreip = '127.0.0.1/8',
Optional[String] $fn_ignorecommand = '',
String $fn_bantime = '600',
String $fn_findtime = '600',
String $fn_maxretry = '5',
String $fn_backend = 'auto',
String $fn_usedns = 'warn',
String $fn_logencoding = 'auto',
Boolean $fn_enabled = false,
String $fn_filter = '%(__name__)s',
String $fn_destemail = 'root@localhost',
String $fn_mta = 'sendmail',
String $fn_protocol = 'tcp',
String $fn_chain = 'INPUT',
String $fn_port = '0:65535',
String $fn_fail2ban_agent = 'Fail2Ban/%(fail2ban_version)s',
String $fn_banaction = 'iptables-multiport',
String $fn_banaction_allports = 'iptables-allports',
String $fn_action_ = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]',
String $fn_action_mw = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
%(mta)s-whois[name=%(__name__)s, sender="%(sender)s", dest="%(destemail)s", protocol="%(protocol)s", chain="%(chain)s"]',
String $fn_action_mwl = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
String $fn_action_mwl = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]'
%(mta)s-whois-lines[name=%(__name__)s, sender="%(sender)s", dest="%(destemail)s", logpath=%(logpath)s, chain="%(chain)s"]',
String $fn_action_xarf = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
String $fn_action_xarf = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
xarf-login-attack[service=%(__name__)s, sender="%(sender)s", logpath=%(logpath)s, port="%(port)s"]',
String $fn_action_cf_mwl = 'cloudflare[cfuser="%(cfemail)s", cftoken="%(cfapikey)s"]
String $fn_action_cf_mwl = 'cloudflare[cfuser="%(cfemail)s", cftoken="%(cfapikey)s"]
%(mta)s-whois-lines[name=%(__name__)s, sender="%(sender)s", dest="%(destemail)s", logpath=%(logpath)s, chain="%(chain)s"]',
String $fn_action_blocklist_de = 'blocklist_de[email="%(sender)s", service=%(filter)s, apikey="%(blocklist_de_apikey)s", agent="%(fail2ban_agent)s"]',
String $fn_action_badips = 'badips.py[category="%(__name__)s", banaction="%(banaction)s", agent="%(fail2ban_agent)s"]',
String $fn_action_badips_report = 'badips[category="%(__name__)s", agent="%(fail2ban_agent)s"]',
String $fn_default_action = 'action_',
String $fn_jail_paths = 'fedora',
String $fn_action_blocklist_de = 'blocklist_de[email="%(sender)s", service=%(filter)s, apikey="%(blocklist_de_apikey)s", agent="%(fail2ban_agent)s"]',
String $fn_action_badips = 'badips.py[category="%(__name__)s", banaction="%(banaction)s", agent="%(fail2ban_agent)s"]',
String $fn_action_badips_report = 'badips[category="%(__name__)s", agent="%(fail2ban_agent)s"]',
String $fn_default_action = 'action_',
String $fn_jail_paths = 'fedora',
) {
# shortcuts