X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/4781c23a88bfec6798e705486fc21a8923a79096..679f59947ae0b34f56598c9f4c1232a833237d51:/cookbooks/fail2ban/recipes/default.rb diff --git a/cookbooks/fail2ban/recipes/default.rb b/cookbooks/fail2ban/recipes/default.rb index 27e373db5..81bb4cd40 100644 --- a/cookbooks/fail2ban/recipes/default.rb +++ b/cookbooks/fail2ban/recipes/default.rb @@ -1,14 +1,14 @@ # -# Cookbook Name:: fail2ban +# Cookbook:: fail2ban # Recipe:: default # -# Copyright 2013, OpenStreetMap Foundation +# Copyright:: 2013, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # -# http://www.apache.org/licenses/LICENSE-2.0 +# https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, @@ -17,40 +17,28 @@ # limitations under the License. # -package "fail2ban" - -if node[:lsb][:release].to_f >= 14.04 - file "/etc/fail2ban/jail.local" do - action :delete - end -else - directory "/etc/fail2ban/jail.d" do - owner "root" - group "group" - mode 0755 - end +include_recipe "munin" - template "/etc/fail2ban/jail.local" do - source "jail.local.erb" - owner "root" - group "root" - mode 0644 - subscribes :create, "template[/etc/fail2ban/jail.d/00-default.conf]" - notifies :reload, "service[fail2ban]" - end -end +package "fail2ban" template "/etc/fail2ban/jail.d/00-default.conf" do source "jail.default.erb" owner "root" group "root" - mode 0644 - notifies :reload, "service[fail2ban]" + mode 0o644 + notifies :restart, "service[fail2ban]" +end + +template "/etc/fail2ban/paths-overrides.local" do + source "paths-overrides.local.erb" + owner "root" + group "root" + mode 0o644 + notifies :restart, "service[fail2ban]" end service "fail2ban" do action [:enable, :start] - supports :status => true, :reload => true, :restart => true end munin_plugin "fail2ban"