smwltr/cdist
1
0
Fork 0
forked from ungleich-public/cdist
Code Pull requests Activity

__fail2ban

Browse source
This commit is contained in:
Simon Walter 2024-05-09 14:05:05 +02:00
parent 3e82b0085b
commit f7d6c966b1
3 changed files with 69 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
cdist/conf/type/__fail2ban/gencode-remote Normal file
View file

@ -0,0 +1,36 @@
#!/bin/sh
#
# 2016 Simon Walter (simon at explicit dot technology)
#
# This file is part of cdist.
#
# cdist is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# cdist is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with cdist. If not, see <http://www.gnu.org/licenses/>.
#
config_file="/etc/fail2ban/jail.conf"
if [ -f "$__object/parameter/enable-services" ]; then
enable_services="$(cat "$__object/parameter/enable-services")"
else
enable_services="$__object_id"
fi
services="$(echo $enable_services | sed -e 's/,/ /g')"
for service in $services
do
echo "[$(tput setaf 6)info$(tput sgr 0)] Enabling fail2ban for $service..." >&2
cat << EOF
perl -i -pe 'BEGIN{undef $/;} s/\[$service\].*[\n]*enabled.*=.*\n/\[$service\]\n\nenabled = true\n/g' $config_file
EOF
done
echo "service fail2ban restart"

32
cdist/conf/type/__fail2ban/manifest Normal file
View file

@ -0,0 +1,32 @@
#!/bin/sh
#
# 2016 Simon Walter (simon at explicit dot technology)
#
# This file is part of cdist.
#
# cdist is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# cdist is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with cdist. If not, see <http://www.gnu.org/licenses/>.
#
os=$(cat "$__global/explorer/os")
case "$os" in
debian|ubuntu|devuan)
__package fail2ban --state present
;;
*)
echo "Your operating system ($os) is currently untested for ${__type##*/}." >&2
echo "If it works as is, please add it to the above list." >&2
__package.fail2ban.--state.present
;;
esac

1
cdist/conf/type/__fail2ban/parameter/optional Normal file
View file

@ -0,0 +1 @@
enable-services