Forge Home

Modules

Puppet

Resources

PuppetEcosystemPuppet CommunityUpdates

denyhosts

This module installs, configures and manages the Denyhosts service.
Project URLRSS FeedReport issues

18,247 downloads

6,889 latest version

5.0 quality score

We run a couple of automated
scans to help you access a
module's quality. Each module is
given a score based on how well
the author has formatted their
code and documentation and
modules are also checked for
malware using VirusTotal.

Please note, the information below
is for guidance only and neither of
these methods should be considered
an endorsement by Puppet.

Support the Puppet Community by contributing to this module

You are welcome to contribute to this module by suggesting new features, currency updates, or fixes. Every contribution is valuable to help ensure that the module remains compatible with the latest Puppet versions and continues to meet community needs. Complete the following steps:

  1. Review the module’s contribution guidelines and any licenses. Ensure that your planned contribution aligns with the author’s standards and any legal requirements.
  2. Fork the repository on GitHub, make changes on a branch of your fork, and submit a pull request. The pull request must clearly document your proposed change.

For questions about updating the module, contact the module’s author.

Version information

  • 1.2.3 (latest)
  • 1.2.2
  • 1.2.1
  • 1.2.0
  • 1.1.1
  • 1.1.0
  • 1.0.7
  • 1.0.6
  • 1.0.4
  • 1.0.3
  • 1.0.2
  • 1.0.1
  • 1.0.0
  • 0.0.12
  • 0.0.10
  • 0.0.9
  • 0.0.8
  • 0.0.7
  • 0.0.6
  • 0.0.5
  • 0.0.4
  • 0.0.3
  • 0.0.1
released Nov 30th 2016
This version is compatible with:
  • Puppet Enterprise >= 3.2.0
  • Puppet >= 3.2.0
  • ,

Start using this module

  • r10k or Code Manager
  • Bolt
  • Manual installation
  • Direct download

Add this module to your Puppetfile:

mod 'dhoppe-denyhosts', '1.2.3'
Learn more about managing modules with a Puppetfile

Add this module to your Bolt project:

bolt module add dhoppe-denyhosts
Learn more about using this module with an existing project

Manually install this module globally with Puppet module tool:

puppet module install dhoppe-denyhosts --version 1.2.3

Direct download is not typically how you would use a Puppet module to manage your infrastructure, but you may want to download the module in order to inspect the code.

Download
Tags: denyhosts

Documentation

dhoppe/denyhosts — version 1.2.3 Nov 30th 2016

denyhosts

Build Status Code Coverage Puppet Forge Puppet Forge - downloads Puppet Forge - endorsement Puppet Forge - scores

Table of Contents

  1. Overview
  2. Module Description - What the module does and why it is useful
  3. Setup - The basics of getting started with denyhosts
  4. Usage - Configuration options and additional functionality
  5. Reference - An under-the-hood peek at what the module is doing and how
  6. Limitations - OS compatibility, etc.
  7. Development - Guide for contributing to the module

Overview

This module installs, configures and manages the Denyhosts service.

Module Description

This module handles installing, configuring and running Denyhosts across a range of operating systems and distributions.

Setup

What denyhosts affects

  • denyhosts package.
  • denyhosts configuration file.
  • denyhosts service.

Setup Requirements

Beginning with denyhosts

Install denyhosts with the default parameters (No configuration files will be changed).

    class { 'denyhosts': }

Install denyhosts with the recommended parameters.

    class { 'denyhosts':
      config_file_template => 'denyhosts/common/etc/denyhosts.conf.erb',
      config_file_hash     => {
        'allowed-hosts' => {
          config_file_path     => '/var/lib/denyhosts/allowed-hosts',
          config_file_mode     => '0644',
          config_file_template => 'denyhosts/common/var/lib/denyhosts/allowed-hosts.erb',
        },
      },
    }

Usage

Update the denyhosts package.

    class { 'denyhosts':
      package_ensure => 'latest',
    }

Remove the denyhosts package.

    class { 'denyhosts':
      package_ensure => 'absent',
    }

Purge the denyhosts package (All configuration files will be removed).

    class { 'denyhosts':
      package_ensure => 'purged',
    }

Deploy the configuration files from source directory.

    class { 'denyhosts':
      config_dir_source => 'puppet:///modules/denyhosts/common/etc',
    }

Deploy the configuration files from source directory (Unmanaged configuration files will be removed).

    class { 'denyhosts':
      config_dir_purge  => true,
      config_dir_source => 'puppet:///modules/denyhosts/common/etc',
    }

Deploy the configuration file from source.

    class { 'denyhosts':
      config_file_source => 'puppet:///modules/denyhosts/common/etc/denyhosts.conf',
    }

Deploy the configuration file from string.

    class { 'denyhosts':
      config_file_string => '# THIS FILE IS MANAGED BY PUPPET',
    }

Deploy the configuration file from template.

    class { 'denyhosts':
      config_file_template => 'denyhosts/common/etc/denyhosts.conf.erb',
    }

Deploy the configuration file from custom template (Additional parameters can be defined).

    class { 'denyhosts':
      config_file_template     => 'denyhosts/common/etc/denyhosts.conf.erb',
      config_file_options_hash => {
        'key' => 'value',
      },
    }

Deploy additional configuration files from source, string or template.

    class { 'denyhosts':
      config_file_hash => {
        'denyhosts.2nd.conf' => {
          config_file_path   => '/etc/denyhosts.2nd.conf',
          config_file_source => 'puppet:///modules/denyhosts/common/etc/denyhosts.2nd.conf',
        },
        'denyhosts.3rd.conf' => {
          config_file_path   => '/etc/denyhosts.3rd.conf',
          config_file_string => '# THIS FILE IS MANAGED BY PUPPET',
        },
        'denyhosts.4th.conf' => {
          config_file_path     => '/etc/denyhosts.4th.conf',
          config_file_template => 'denyhosts/common/etc/denyhosts.4th.conf.erb',
        },
      },
    }

Disable the denyhosts service.

    class { 'denyhosts':
      service_ensure => 'stopped',
    }

Reference

Classes

Public Classes

  • denyhosts: Main class, includes all other classes.

Private Classes

  • denyhosts::install: Handles the packages.
  • denyhosts::config: Handles the configuration file.
  • denyhosts::service: Handles the service.

Parameters

package_ensure

Determines if the package should be installed. Valid values are 'present', 'latest', 'absent' and 'purged'. Defaults to 'present'.

package_name

Determines the name of package to manage. Defaults to 'denyhosts'.

package_list

Determines if additional packages should be managed. Defaults to 'undef'.

config_dir_ensure

Determines if the configuration directory should be present. Valid values are 'absent' and 'directory'. Defaults to 'directory'.

config_dir_path

Determines if the configuration directory should be managed. Defaults to '/etc'

config_dir_purge

Determines if unmanaged configuration files should be removed. Valid values are 'true' and 'false'. Defaults to 'false'.

config_dir_recurse

Determines if the configuration directory should be recursively managed. Valid values are 'true' and 'false'. Defaults to 'true'.

config_dir_source

Determines the source of a configuration directory. Defaults to 'undef'.

config_file_ensure

Determines if the configuration file should be present. Valid values are 'absent' and 'present'. Defaults to 'present'.

config_file_path

Determines if the configuration file should be managed. Defaults to '/etc/denyhosts.conf'

config_file_owner

Determines which user should own the configuration file. Defaults to 'root'.

config_file_group

Determines which group should own the configuration file. Defaults to 'root'.

config_file_mode

Determines the desired permissions mode of the configuration file. Defaults to '0640'.

config_file_source

Determines the source of a configuration file. Defaults to 'undef'.

config_file_string

Determines the content of a configuration file. Defaults to 'undef'.

config_file_template

Determines the content of a configuration file. Defaults to 'undef'.

config_file_notify

Determines if the service should be restarted after configuration changes. Defaults to 'Service[denyhosts]'.

config_file_require

Determines which package a configuration file depends on. Defaults to 'Package[denyhosts]'.

config_file_hash

Determines which configuration files should be managed via denyhosts::define. Defaults to '{}'.

config_file_options_hash

Determines which parameters should be passed to an ERB template. Defaults to '{}'.

service_ensure

Determines if the service should be running or not. Valid values are 'running' and 'stopped'. Defaults to 'running'.

service_name

Determines the name of service to manage. Defaults to 'denyhosts'.

service_enable

Determines if the service should be enabled at boot. Valid values are 'true' and 'false'. Defaults to 'true'.

email

Determines which email address (recipient) should be notified about restricted hosts and suspicious logins. Defaults to "denyhosts@${::domain}".

email_from

Determines which email address (sender) should be used. Defaults to "root@${::fqdn}".

email_subject

Determines which email subject should be used. Defaults to "[denyhosts] Report from ${::fqdn}".

deny_threshold_invalid

Determines the number of failed login attempts (invalid user) needed to block a host. Defaults to '3'.

deny_threshold_valid

Determines the number of failed login attempts (valid user) needed to block a host. Defaults to '3'.

purge_deny

Determines after how many days entries will be purged. Defaults to '5d'.

whitelist

Determines which ip addresses will not be reported. Defaults to '['127.0.0.1', '192.168.56.*']'.

Limitations

This module has been tested on:

  • Debian 6/7
  • Ubuntu 12.04

Development

Bug Report

If you find a bug, have trouble following the documentation or have a question about this module - please create an issue.

Pull Request

If you are able to patch the bug or add the feature yourself - please make a pull request.

Contributors

The list of contributors can be found at: https://github.com/dhoppe/puppet-denyhosts/graphs/contributors