# Module name: confdroid_haproxy
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary  Class manages fail2ban settings
##############################################################################
class confdroid_haproxy::monitoring::fail2ban (

) inherits confdroid_haproxy::params {
  if $hy_manage_fail2ban == true {
    require confdroid_fail2ban # (external module)

    # configure filter

    file { '/etc/fail2ban/filter.d/haproxy.conf':
      ensure   => file,
      owner    => 'root',
      group    => 'root',
      mode     => '0644',
      selrange => s0,
      selrole  => object_r,
      seltype  => etc_t,
      seluser  => system_u,
      content  => template('confdroid_haproxy/fail2ban/f2b_haproxy.conf.erb'),
      notify   => Service['fail2ban'],
    }

    file { '/etc/fail2ban/jail.d/010-haproxy.conf':
      ensure   => file,
      owner    => 'root',
      group    => 'root',
      mode     => '0644',
      selrange => s0,
      selrole  => object_r,
      seltype  => etc_t,
      seluser  => system_u,
      content  => template('confdroid_haproxy/fail2ban/010_jail.d_haproxy.conf.erb'),
      notify   => Service['fail2ban'],
    }
  }
}