42 lines
1.1 KiB
Puppet
42 lines
1.1 KiB
Puppet
# Module name: cd_haproxy
|
|
# Author: Arne Teuke (arne_teuke@confdroid.com)
|
|
# @summary Class manages fail2ban settings
|
|
##############################################################################
|
|
class cd_haproxy::monitoring::fail2ban (
|
|
|
|
) inherits cd_haproxy::params {
|
|
|
|
if $hy_manage_fail2ban == true {
|
|
|
|
require cd_fail2ban
|
|
|
|
# configure filter
|
|
|
|
file { '/etc/fail2ban/filter.d/haproxy.conf':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
selrange => s0,
|
|
selrole => object_r,
|
|
seltype => etc_t,
|
|
seluser => system_u,
|
|
content => template('cd_haproxy/fail2ban/f2b_haproxy.conf.erb'),
|
|
notify => Service['fail2ban'],
|
|
}
|
|
|
|
file { '/etc/fail2ban/jail.d/010-haproxy.conf':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
selrange => s0,
|
|
selrole => object_r,
|
|
seltype => etc_t,
|
|
seluser => system_u,
|
|
content => template('cd_haproxy/fail2ban/010_jail.d_haproxy.conf.erb'),
|
|
notify => Service['fail2ban'],
|
|
}
|
|
}
|
|
}
|