Make more fail2ban jail properties optional

[chef.git] / cookbooks / fail2ban / templates / default / jail.erb

diff --git a/cookbooks/fail2ban/templates/default/jail.erb b/cookbooks/fail2ban/templates/default/jail.erb
index fc0f8bdc8befe9ab92434d1d131adb2d3e48ae10..91978488c5569caaed9f077b6ced382f2ab343ea 100644 (file)
--- a/cookbooks/fail2ban/templates/default/jail.erb
+++ b/cookbooks/fail2ban/templates/default/jail.erb
@@ -1,6 +1,22 @@
 # DO NOT EDIT - This file is being maintained by Chef
 
-[DEFAULT]
-destemail = admins@openstreetmap.org
-banaction = shorewall
-bantime = 14400
+[<%= @name %>]
+enabled = true
+<% if @protocol -%>
+protocol = <%= @protocol %>
+<% end -%>
+<% if @ports -%>
+port = <%= @ports.join(",") %>
+<% end -%>
+<% if @filter -%>
+filter = <%= @filter %>
+<% end -%>
+<% if @logpath -%>
+logpath = <%= @logpath %>
+<% end -%>
+<% if @maxretry -%>
+maxretry = <%= @maxretry %>
+<% end -%>
+<% if @ignoreips -%>
+ignoreip = <%= @ignoreips.sort.join(" ") %>
+<% end -%>