move fail2ban to separate manifest filesunet-ops-2015-04-14-v33

1 files changed, 20 insertions, 0 deletions

diff --git a/global/overlay/etc/puppet/modules/sunet/manifests/fail2ban.pp b/global/overlay/etc/puppet/modules/sunet/manifests/fail2ban.pp
new file mode 100644
index 0000000..8dc6e31
--- /dev/null
+++ b/global/overlay/etc/puppet/modules/sunet/manifests/fail2ban.pp
@@ -0,0 +1,20 @@
+class sunet::fail2ban {
+
+  include augeas
+
+  package {'fail2ban':
+      ensure => 'latest'
+  } ->
+  service {'fail2ban':
+     ensure => 'running'
+  }
+  augeas { "fail2ban_defaults":
+      context => "/files/etc/fail2ban/jail.conf",
+      incl => "/etc/fail2ban/jail.conf",
+      lens => "Shellvars.lns",
+      changes => [
+          'set bantime "600800"',
+      ],
+      notify => Service['fail2ban'],
+  }
+}