Issue 2487 - Introduce fail2ban module

modules/fail2ban/manifests/filter.pp

 # == Type: fail2ban::filter
 #
 # Manage filter information and files for any custom filter.
 #
 # == Parameters:
 #
-# [*failregex*]
-#   The regular expressions applied to the filter.
+# [*regexes*]
+#   Array of strings containing the regular expressions applied to
+#   the filter.
 #
 # [*ensure*]
-#   A boolean to ensure the state of the file.
+#   Translates directly into the state of the file resource.
 #
 # === Examples:
 #
-#   filters => {
-#     'wordpress' => {
-#       failregex => [
-#         '^<HOST>.*\"WordPress\/.*',
-#       ],
-#     }
-#   },
+#   fail2ban::filter {'CVE-2013-0235':
+#     regexes => [
+#       '^<HOST>.*\"WordPress\/.*',
+#       '^.*\"WordPress\/.*<HOST>.*',
+#     ],
+#     'ensure' => 'present',
+#   }
+#
 define fail2ban::filter (
-  $failregex = undef,
+  $regexes = [],
   $ensure = 'present',
 ) {
 
   include fail2ban
   include stdlib
 
-  if ($failregex != undef) and ($ensure == 'present') {
-    file {"/etc/fail2ban/filter.d/$title.conf":
-      ensure => $ensure,
-      content => template("fail2ban/filter.erb"),
-      group => 'root',
-      mode => '0644',
-      owner => 'root',
-      require => Package['fail2ban'],
-      notify => Service['fail2ban'],
-    }
+  if (size($regexes) == 0) and ($ensure == 'present') {
+    fail("An array of one or more regular expressions is needed.")
   }
-}
+
+  # The $name parameter is used to compose the file name.
+  file {"/etc/fail2ban/filter.d/$name.conf":
+    ensure => $ensure,
+    content => template("fail2ban/filter.erb"),
+    group => 'root',
+    mode => '0644',
+    owner => 'root',
+    require => Package['fail2ban'],
+    notify => Service['fail2ban'],
+  }
+}
+