fail2ban: lint fixes
[mirror/dsa-puppet.git] / modules / fail2ban / manifests / init.pp
index f4f7b9f..b85b009 100644 (file)
@@ -1,3 +1,7 @@
+# fail2ban setup
+#
+# Checks that are only used on particular systems are defined elsewhere,
+# generally in subclasses.
 class fail2ban {
        package { 'fail2ban':
                ensure => installed,
@@ -9,7 +13,7 @@ class fail2ban {
 
        file { '/etc/fail2ban/jail.d/dsa-00-default.conf':
                source => 'puppet:///modules/fail2ban/jail/dsa-00-default.conf',
-               notify  => Service['fail2ban'],
+               notify => Service['fail2ban'],
        }
 
        ferm::conf { 'f2b':
@@ -37,8 +41,8 @@ class fail2ban {
 
        # XXX Maybe this will be automatically done in buster, it is certainly needed in stretch. So maybe:  versioncmp($::lsbmajdistrelease, '9') <= 0
        concat::fragment { 'puppet-crontab--fail2ban-cleanup':
-               target => '/etc/cron.d/puppet-crontab',
-               content  => @(EOF)
+               target  => '/etc/cron.d/puppet-crontab',
+               content => @(EOF)
                        17 * * * * root chronic python3 -c "import sys, logging; logging.basicConfig(stream=sys.stdout, level=logging.INFO); from fail2ban.server.database import Fail2BanDb; db = Fail2BanDb('/var/lib/fail2ban/fail2ban.sqlite3'); db.purge(); db._db.cursor().execute('VACUUM')"
                        | EOF
        }