Issue 2487 - Introduce fail2ban module

modules/fail2ban/manifests/init.pp

 # == Class: fail2ban
 #
 # Create and maintain fail2ban (http://www.fail2ban.org/) setups.
 #
 # == Parameters:
 #
-# [*jail_config*]

[mathias, 2016/12/02 13:16:21]

One last point: I'd like to rename this one to "jails". Background: One of the
follow-ups for this ticket will be the introduction of a named type called
fail2ban::jail (which will compose the target configuration file using the
concat module). The idea is that having these parts as distinct resources allows
for the introduction of a combined type (i.e. fail2ban::monitor or
fail2ban::concern or something) that eases the creation of filers and jails in
the most common form, where they have a 1:1 relationship (so one does not need
to separate that over multiple configuration items). Does that sound reasonable?

[f.lopez, 2016/12/02 14:16:13]

Yeah sounds good to me, that was actually my first idea about the config file.

+# [*jails*]
 #   Provisions a jail.local adjacent to the default configuration.
 #   By default entries will have the following parameters:
 #     'enabled' => 'true',
 #     'port' => 'all',
 #     'maxretry' => 6,
 #     'banaction' => 'iptables-allports',
 #     'bantime' => 3600,
 #
 #   For the default banaction iptables-allports, the port parameter
 #   is not used and only set here for documentation purposes. Note
 #   that if 'banaction' is set to iptables-multiport, it requires that
 #   the 'port' parameter contains one or more comma-separated ports or protocols.
 #
 # [*package*]
 #   Overwrite the default package options, to fine-tune the target version (i.e.
 #   ensure => 'latest') or remove fail2ban (ensure => 'absent' or 'purged')
 #
 # [*service*]
 #   Overwrite the default service options.
 #
 # [*filters*]
 #   Adds adittional filters to the filters.d folder.
 #
 # === Examples:
 #
 #  class {'fail2ban':
 #    package => {ensure => 'present',},
 #    service => {},
-#    jail_config => {
+#    jails => {
 #      'CVE-2013-0235' => {
 #        'logpath' => '/var/log/nginx/access_log_hg',
 #        'banaction' => 'iptables-multiport',
 #        'port' => 'https, http',
 #      }
 #    },
 #    filters => {
 #      'CVE-2013-0235' => {
 #        regexes => [
 #          '^<HOST>.*\"WordPress\/.*',
 #        ],
 #      }
 #    },
 #  }
 #
 class fail2ban (
   $package = hiera('fail2ban::package', {}),
   $service = hiera('fail2ban::service', {}),
-  $jail_config = hiera('fail2ban::jail_config', {}),
+  $jails = hiera('fail2ban::jails', {}),
   $filters = hiera('fail2ban::filters', {}),
 ) {
 
   include stdlib
 
   $jail_default = {
     'enabled' => 'true',
     'port' => 'all',
     'maxretry' => 6,
     'banaction' => 'iptables-allports',
@@ skipping 26 matching lines @@
       notify => Service['fail2ban'],
       require => Package['fail2ban'],
     }
 
     Package[$title] -> File['/etc/fail2ban/jail.local']
     Service[$title] <~ Package[$title]
   }
 
 }