diff options
-rw-r--r-- | .gitmodules | 6 | ||||
-rw-r--r-- | modules/base_configuration/manifests/init.pp | 15 | ||||
m--------- | modules/fail2ban | 0 |
3 files changed, 18 insertions, 3 deletions
diff --git a/.gitmodules b/.gitmodules index 3a8bbe0..5310ea7 100644 --- a/.gitmodules +++ b/.gitmodules | |||
@@ -19,6 +19,6 @@ | |||
19 | [submodule "modules/puppetlabs_concat"] | 19 | [submodule "modules/puppetlabs_concat"] |
20 | path = modules/concat | 20 | path = modules/concat |
21 | url = https://github.com/puppetlabs/puppetlabs-concat.git | 21 | url = https://github.com/puppetlabs/puppetlabs-concat.git |
22 | [submodule "modules/pacman"] | 22 | [submodule "modules/fail2ban"] |
23 | path = modules/pacman | 23 | path = modules/fail2ban |
24 | url = https://github.com/aboe76/puppet-pacman.git | 24 | url = git://git.immae.eu/github/lelutin/puppet-fail2ban |
diff --git a/modules/base_configuration/manifests/init.pp b/modules/base_configuration/manifests/init.pp index dca17b3..f432e29 100644 --- a/modules/base_configuration/manifests/init.pp +++ b/modules/base_configuration/manifests/init.pp | |||
@@ -58,4 +58,19 @@ class base_configuration ( | |||
58 | order => 15, | 58 | order => 15, |
59 | include => '/etc/pacman.d/mirrorlist' | 59 | include => '/etc/pacman.d/mirrorlist' |
60 | } | 60 | } |
61 | |||
62 | ensure_packages(["whois"], { 'install_options' => '--asdeps' }) | ||
63 | class { 'fail2ban': | ||
64 | logtarget => 'SYSLOG', | ||
65 | backend => 'systemd' | ||
66 | } | ||
67 | fail2ban::jail { 'sshd': | ||
68 | backend => 'systemd', | ||
69 | port => 'ssh', | ||
70 | filter => 'sshd', | ||
71 | maxretry => 10, | ||
72 | bantime => 86400, | ||
73 | logpath => '', | ||
74 | order => 10 | ||
75 | } | ||
61 | } | 76 | } |
diff --git a/modules/fail2ban b/modules/fail2ban new file mode 160000 | |||
Subproject 40b2dc48cfe7bc44cf8d85887614482892f39a6 | |||