# Module name: cd_haproxy
# Author: Arne Teuke (arne_teuke@confdroid.com)
# @summary  Class manages fail2ban settings
##############################################################################
class cd_haproxy::monitoring::fail2ban (

) inherits cd_haproxy::params {

  if $hy_manage_fail2ban == true {

    require cd_fail2ban

    # configure filter
    
    file { '/etc/fail2ban/filter.d/haproxy.conf':
      ensure    =>  file,
      owner     =>  'root',
      group     =>  'root',
      mode      =>  '0644',
      selrange  =>  s0,
      selrole   =>  object_r,
      seltype   =>  etc_t,
      seluser   =>  system_u,
      content   =>  template('cd_haproxy/fail2ban/f2b_haproxy.conf.erb'),
      notify    =>  Service['fail2ban'],
    }

    file { '/etc/fail2ban/jail.d/010-haproxy.conf':
      ensure    =>  file,
      owner     =>  'root',
      group     =>  'root',
      mode      =>  '0644',
      selrange  =>  s0,
      selrole   =>  object_r,
      seltype   =>  etc_t,
      seluser   =>  system_u,
      content   =>  template('cd_haproxy/fail2ban/010_jail.d_haproxy.conf.erb'),
      notify    =>  Service['fail2ban'],
    }
  }
}