fail2ban.sls

fail2ban:
  pkg:
    - installed
  service:
    - running
    - require:
      - pkg: fail2ban
    - watch:
      - file: /etc/fail2ban/jail.local

/etc/fail2ban/jail.local:
  file:
    - managed
    {% if 'iredmail' in grains['roles'] %}
    - source: salt://settings/fail2ban/mail-jail.local
    {% else %}
    - source: salt://settings/fail2ban/jail.local
    {% endif %}
    - require:
      - pkg: fail2ban

{% if 'iredmail' in grains['roles'] %}
/etc/fail2ban/filter.d/postfix-sasl.conf:
  file:
    - managed
    - source: salt://settings/fail2ban/mail/filter.d/postfix-sasl.conf
    - require:
      - pkg: fail2ban

/etc/fail2ban/filter.d/dovecot.conf:
  file:
    - managed
    - source: salt://settings/fail2ban/mail/filter.d/dovecot.conf
    - require:
      - pkg: fail2ban

/etc/fail2ban/filter.d/roundcube-auth.conf:
  file:
    - managed
    - source: salt://settings/fail2ban/mail/filter.d/roundcube-auth.conf
    - require:
      - pkg: fail2ban
{% endif %}