add fail2ban class

2025-02-14 12:01:01 +01:00
parent 78f5f6d87c
commit 20dba070d6
2 changed files with 26 additions and 1 deletions
--- a/manifests/monitoring/fail2ban.pp
+++ b/manifests/monitoring/fail2ban.pp
@@ -22,7 +22,20 @@ class cd_haproxy::monitoring::fail2ban (
      seltype   =>  etc_t,
      seluser   =>  system_u,
      content   =>  template('cd_haproxy/fail2ban/f2b_haproxy.conf.erb'),
-      notify    =>  Service[$fn_service],
+      notify    =>  Service['fail2ban'],
+    }
+
+    file { '/etc/fail2ban/jail.d/010-haproxy.conf':
+      ensure    =>  file,
+      owner     =>  'root',
+      group     =>  'root',
+      mode      =>  '0644',
+      selrange  =>  s0,
+      selrole   =>  object_r,
+      seltype   =>  etc_t,
+      seluser   =>  system_u,
+      content   =>  template('cd_haproxy/fail2ban/010_jaild_haproxy.conf.erb'),
+      notify    =>  Service['fail2ban'],
    }
  }
 }