From: Peter Palfrader <peter@palfrader.org>
Date: Tue, 30 Oct 2018 08:57:53 +0000 (+0100)
Subject: Clean up fail2ban database
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=881497449f117f1e36115373ab8a8bcfa370e63a;p=mirror%2Fdsa-puppet.git

Clean up fail2ban database
---

diff --git a/modules/fail2ban/manifests/init.pp b/modules/fail2ban/manifests/init.pp
index 3051b9975..f97bc4892 100644
--- a/modules/fail2ban/manifests/init.pp
+++ b/modules/fail2ban/manifests/init.pp
@@ -14,4 +14,12 @@ class fail2ban {
 				| EOF
 	}
 
+	# XXX Maybe this will be automatically done in buster, it is certainly needed in stretch. So maybe:  versioncmp($::lsbmajdistrelease, '9') <= 0
+	concat::fragment { 'dsa-puppet-stuff--fail2ban-cleanup':
+		target => '/etc/cron.d/dsa-puppet-stuff',
+		content  => @(EOF)
+			17 * * * * root python3 -c "import sys, logging; logging.basicConfig(stream=sys.stdout, level=logging.INFO); from fail2ban.server.database import Fail2BanDb; db = Fail2BanDb('/var/lib/fail2ban/fail2ban.sqlite3'); db.purge(); db._db.cursor().execute('VACUUM')"
+			| EOF
+	}
+
 }