modules/base_installation/manifests/firewall.pp

   1 class base_installation::firewall inherits base_installation {
   2   ensure_packages(["whois"], { 'install_options' => '--asdeps' })
   3
   4   class { 'fail2ban':
   5     logtarget => 'SYSLOG',
   6     backend   => 'systemd'
   7   }
   8
   9   fail2ban::jail { 'sshd':
  10     backend  => 'systemd',
  11     port     => 'ssh',
  12     filter   => 'sshd',
  13     maxretry => 10,
  14     bantime  => 86400,
  15     logpath  => '',
  16     order    => 10
  17   }
  18
  19   contain "fail2ban"
  20 }