+
+ class { '::logrotate':
+ manage_cron_daily => false,
+ config => {
+ rotate_every => 'week',
+ rotate => 4,
+ create => true,
+ compress => true,
+ olddir => '/var/log/old',
+ tabooext => "+ .pacorig .pacnew .pacsave",
+ }
+ }
+
+ logrotate::rule { 'wtmp':
+ path => '/var/log/wtmp',
+ rotate_every => 'month',
+ create => true,
+ create_mode => '0664',
+ create_owner => 'root',
+ create_group => 'utmp',
+ rotate => '1',
+ minsize => '1M',
+ }
+ logrotate::rule { 'btmp':
+ path => '/var/log/btmp',
+ missingok => true,
+ rotate_every => 'month',
+ create => true,
+ create_mode => '0600',
+ create_owner => 'root',
+ create_group => 'utmp',
+ rotate => '1',
+ }
+
+ ensure_packages(["whois"], { 'install_options' => '--asdeps' })
+ class { 'fail2ban':
+ logtarget => 'SYSLOG',
+ backend => 'systemd'
+ }
+ fail2ban::jail { 'sshd':
+ backend => 'systemd',
+ port => 'ssh',
+ filter => 'sshd',
+ maxretry => 10,
+ bantime => 86400,
+ logpath => '',
+ order => 10
+ }