X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Ffail2ban%2Fmanifests%2Finit.pp;h=f4f7b9fd08d2f7c9bb64a8645e3d53c0eee961ba;hb=3a403df3e4f5c89ec1b1893396dfdd3c37e3bb7a;hp=a6a9cfab04db673ec7ea6869fd290fb7a63e4101;hpb=69ae10698c417e4157aa1cde3d4415b0636c69b5;p=mirror%2Fdsa-puppet.git diff --git a/modules/fail2ban/manifests/init.pp b/modules/fail2ban/manifests/init.pp index a6a9cfab0..f4f7b9fd0 100644 --- a/modules/fail2ban/manifests/init.pp +++ b/modules/fail2ban/manifests/init.pp @@ -12,14 +12,14 @@ class fail2ban { notify => Service['fail2ban'], } - @ferm::conf { 'f2b': + ferm::conf { 'f2b': content => @(EOF), @hook post "type fail2ban-client > /dev/null && (fail2ban-client ping > /dev/null && fail2ban-client reload > /dev/null ) || true"; @hook flush "type fail2ban-client > /dev/null && (fail2ban-client ping > /dev/null && fail2ban-client reload > /dev/null ) || true"; | EOF } - @ferm::rule { 'dsa-f2b-setup1': + ferm::rule { 'dsa-f2b-setup1': prio => '005', description => 'f2b master rule', chain => 'dsa-f2b', @@ -27,7 +27,7 @@ class fail2ban { rule => '', notarule => true, } - @ferm::rule { 'dsa-f2b-setup2': + ferm::rule { 'dsa-f2b-setup2': prio => '005', description => 'f2b master rule', chain => 'INPUT', @@ -36,8 +36,8 @@ class fail2ban { } # XXX Maybe this will be automatically done in buster, it is certainly needed in stretch. So maybe: versioncmp($::lsbmajdistrelease, '9') <= 0 - concat::fragment { 'dsa-puppet-stuff--fail2ban-cleanup': - target => '/etc/cron.d/dsa-puppet-stuff', + concat::fragment { 'puppet-crontab--fail2ban-cleanup': + target => '/etc/cron.d/puppet-crontab', content => @(EOF) 17 * * * * root chronic python3 -c "import sys, logging; logging.basicConfig(stream=sys.stdout, level=logging.INFO); from fail2ban.server.database import Fail2BanDb; db = Fail2BanDb('/var/lib/fail2ban/fail2ban.sqlite3'); db.purge(); db._db.cursor().execute('VACUUM')" | EOF