Puppet Class: confdroid_haproxy::monitoring::fail2ban

Inherits:
confdroid_haproxy::params
Defined in:
manifests/monitoring/fail2ban.pp

Summary

Class manages fail2ban settings

Overview

Module name: confdroid_haproxy Author: Arne Teuke (arne_teuke@confdroid.com)



5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
 
# File 'manifests/monitoring/fail2ban.pp', line 5

class confdroid_haproxy::monitoring::fail2ban (

) inherits confdroid_haproxy::params {
  if $hy_manage_fail2ban == true {
    require confdroid_fail2ban # (external module)

    # configure filter

    file { '/etc/fail2ban/filter.d/haproxy.conf':
      ensure   => file,
      owner    => 'root',
      group    => 'root',
      mode     => '0644',
      selrange => s0,
      selrole  => object_r,
      seltype  => etc_t,
      seluser  => system_u,
      content  => template('confdroid_haproxy/fail2ban/f2b_haproxy.conf.erb'),
      notify   => Service['fail2ban'],
    }

    file { '/etc/fail2ban/jail.d/010-haproxy.conf':
      ensure   => file,
      owner    => 'root',
      group    => 'root',
      mode     => '0644',
      selrange => s0,
      selrole  => object_r,
      seltype  => etc_t,
      seluser  => system_u,
      content  => template('confdroid_haproxy/fail2ban/010_jail.d_haproxy.conf.erb'),
      notify   => Service['fail2ban'],
    }
  }
}