Restart cgimap on upgrade

[chef.git] / cookbooks / fail2ban / recipes / default.rb

diff --git a/cookbooks/fail2ban/recipes/default.rb b/cookbooks/fail2ban/recipes/default.rb
index b06ea2a452d2ba2f213a92e632c0d6bbe5370474..50b31d1b39e433886a483aadcf740911ad410b6d 100644 (file)
--- a/cookbooks/fail2ban/recipes/default.rb
+++ b/cookbooks/fail2ban/recipes/default.rb
@@ -19,18 +19,38 @@
 
 package "fail2ban"
 
 
 package "fail2ban"
 

-template "/etc/fail2ban/jail.local" do
-  source "jail.erb"
+if node[:lsb][:release].to_f >= 14.04
+  file "/etc/fail2ban/jail.local" do
+    action :delete
+  end
+else
+  directory "/etc/fail2ban/jail.d" do
+    owner "root"
+    group "root"
+    mode 0o755
+  end
+
+  template "/etc/fail2ban/jail.local" do
+    source "jail.local.erb"
+    owner "root"
+    group "root"
+    mode 0o644
+    subscribes :create, "template[/etc/fail2ban/jail.d/00-default.conf]"
+    notifies :reload, "service[fail2ban]"
+  end
+end
+
+template "/etc/fail2ban/jail.d/00-default.conf" do
+  source "jail.default.erb"

   owner "root"
   group "root"
   owner "root"
   group "root"

-  mode 0644
-  variables :jails => []
+  mode 0o644
+  notifies :reload, "service[fail2ban]"

 end
 
 service "fail2ban" do
   action [:enable, :start]
   supports :status => true, :reload => true, :restart => true
 end
 
 service "fail2ban" do
   action [:enable, :start]
   supports :status => true, :reload => true, :restart => true

-  subscribes :reload, "template[/etc/fail2ban/jail.local]"

 end
 
 munin_plugin "fail2ban"
 end
 
 munin_plugin "fail2ban"