}
# XXX Maybe this will be automatically done in buster, it is certainly needed in stretch. So maybe: versioncmp($::lsbmajdistrelease, '9') <= 0
- concat::fragment { 'dsa-puppet-stuff--fail2ban-cleanup':
- target => '/etc/cron.d/dsa-puppet-stuff',
+ concat::fragment { 'puppet-crontab--fail2ban-cleanup':
+ target => '/etc/cron.d/puppet-crontab',
content => @(EOF)
17 * * * * root chronic python3 -c "import sys, logging; logging.basicConfig(stream=sys.stdout, level=logging.INFO); from fail2ban.server.database import Fail2BanDb; db = Fail2BanDb('/var/lib/fail2ban/fail2ban.sqlite3'); db.purge(); db._db.cursor().execute('VACUUM')"
| EOF