Clean up fail2ban database

diff --git a/modules/fail2ban/manifests/init.pp b/modules/fail2ban/manifests/init.pp
index 3051b99..f97bc48 100644 (file)
--- a/modules/fail2ban/manifests/init.pp
+++ b/modules/fail2ban/manifests/init.pp
@@ -14,4 +14,12 @@ class fail2ban {
                                | EOF
        }
 
+       # XXX Maybe this will be automatically done in buster, it is certainly needed in stretch. So maybe:  versioncmp($::lsbmajdistrelease, '9') <= 0
+       concat::fragment { 'dsa-puppet-stuff--fail2ban-cleanup':
+               target => '/etc/cron.d/dsa-puppet-stuff',
+               content  => @(EOF)
+                       17 * * * * root python3 -c "import sys, logging; logging.basicConfig(stream=sys.stdout, level=logging.INFO); from fail2ban.server.database import Fail2BanDb; db = Fail2BanDb('/var/lib/fail2ban/fail2ban.sqlite3'); db.purge(); db._db.cursor().execute('VACUUM')"
+                       | EOF
+       }
+
 }