X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/9391df3f714e695bd47ed4122065617e8d3461d9..70eaccc45b23013cf60449b024bb65bbd34d48ec:/cookbooks/fail2ban/resources/filter.rb diff --git a/cookbooks/fail2ban/resources/filter.rb b/cookbooks/fail2ban/resources/filter.rb index b28e8f6c7..d37ba4bb2 100644 --- a/cookbooks/fail2ban/resources/filter.rb +++ b/cookbooks/fail2ban/resources/filter.rb @@ -1,14 +1,14 @@ # -# Cookbook Name:: fail2ban +# Cookbook:: fail2ban # Resource:: fail2ban_filter # -# Copyright 2015, OpenStreetMap Foundation +# Copyright:: 2015, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # -# http://www.apache.org/licenses/LICENSE-2.0 +# https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, @@ -17,14 +17,40 @@ # limitations under the License. # -actions :create, :delete default_action :create -attribute :name, :kind_of => String, :name_attribute => true -attribute :source, :kind_of => String -attribute :failregex, :kind_of => [String, Array] -attribute :ignoreregex, :kind_of => [String, Array] +property :filter, :kind_of => String, :name_attribute => true +property :source, :kind_of => String +property :failregex, :kind_of => [String, Array] +property :ignoreregex, :kind_of => [String, Array] + +action :create do + if new_resource.source + remote_file "/etc/fail2ban/filter.d/#{new_resource.filter}.conf" do + source new_resource.source + owner "root" + group "root" + mode 0o644 + end + else + template "/etc/fail2ban/filter.d/#{new_resource.filter}.conf" do + cookbook "fail2ban" + source "filter.erb" + owner "root" + group "root" + mode 0o644 + variables :failregex => new_resource.failregex, + :ignoreregex => new_resource.ignoreregex + end + end +end + +action :delete do + file "/etc/fail2ban/filter.d/#{new_resource.filter}.conf" do + action :delete + end +end def after_created - notifies :reload, "service[fail2ban]" + notifies :restart, "service[fail2ban]" end