actually, let's make this shared again

2 files changed, 31 insertions, 0 deletions

diff --git a/modules/fail2ban/files/jail.local b/modules/fail2ban/files/jail.local
new file mode 100644
index 0000000..00329d7
--- /dev/null
+++ b/modules/fail2ban/files/jail.local
@@ -0,0 +1,10 @@
+[DEFAULT]
+bantime = 1d
+
+[sshd]
+enabled = true
+ignoreip = 10.19.49.0/24
+
+[nginx-botsearch]
+enabled = true
+logpath = /var/log/nginx/*.log
diff --git a/modules/fail2ban/manifests/init.pp b/modules/fail2ban/manifests/init.pp
new file mode 100644
index 0000000..5ca6483
--- /dev/null
+++ b/modules/fail2ban/manifests/init.pp
@@ -0,0 +1,21 @@
+class fail2ban {
+  package { "fail2ban":
+    ensure => installed;
+  }
+
+  file {
+    "/etc/fail2ban/jail.local":
+      source => "puppet:///modules/fail2ban/jail.local",
+      notify => Service["fail2ban"],
+      require => Package["fail2ban"];
+  }
+
+  service { "fail2ban":
+    ensure => running,
+    enable => true,
+    require => [
+      File["/etc/fail2ban/jail.local"],
+      Package["fail2ban"],
+    ];
+  }
+}