X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/21958591555b0b80370e944e3128ac5d533c281d..285e9901c691d922b8e3adaff28ec6604cd7e999:/cookbooks/fail2ban/recipes/default.rb diff --git a/cookbooks/fail2ban/recipes/default.rb b/cookbooks/fail2ban/recipes/default.rb index 0fdc6c9fe..81bb4cd40 100644 --- a/cookbooks/fail2ban/recipes/default.rb +++ b/cookbooks/fail2ban/recipes/default.rb @@ -1,14 +1,14 @@ # -# Cookbook Name:: fail2ban +# Cookbook:: fail2ban # Recipe:: default # -# Copyright 2013, OpenStreetMap Foundation +# Copyright:: 2013, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # -# http://www.apache.org/licenses/LICENSE-2.0 +# https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, @@ -17,18 +17,28 @@ # limitations under the License. # +include_recipe "munin" + package "fail2ban" -template "/etc/fail2ban/jail.local" do - source "jail.erb" +template "/etc/fail2ban/jail.d/00-default.conf" do + source "jail.default.erb" + owner "root" + group "root" + mode 0o644 + notifies :restart, "service[fail2ban]" +end + +template "/etc/fail2ban/paths-overrides.local" do + source "paths-overrides.local.erb" owner "root" group "root" - mode 0644 - variables :jails => [] + mode 0o644 + notifies :restart, "service[fail2ban]" end service "fail2ban" do action [:enable, :start] - supports :status => true, :reload => true, :restart => true - subscribes :reload, "template[/etc/fail2ban/jail.local]" end + +munin_plugin "fail2ban"