Commit 2d5c765d authored by Holger Levsen's avatar Holger Levsen
Browse files

jenkins: enable fail2ban everywhere and monitor it with munin 



Signed-off-by: default avatarHolger Levsen <holger@layer-acht.org>
parent 39ade446

update_jdn.sh

+6 −0
Original line number Diff line number Diff line
@@ -314,6 +314,7 @@ if [ -f /etc/debian_version ] ; then 
			cdebootstrap-

			debootstrap

			devscripts

			fail2ban

			eatmydata

			etckeeper

			figlet
@@ -723,6 +724,11 @@ fi 


if ! $UP2DATE || [ $BASEDIR/hosts/$HOSTNAME/etc/munin -nt $STAMP ] ; then

	cd /etc/munin/plugins

	# enable some plugins everywhere, currently just fail2ban

	for i in fail2ban ; do

		[ -e $i ] || sudo ln -s /usr/share/munin/plugins/$i $i

	done

	# delete some everywhere

	sudo rm -f postfix_* open_inodes interrupts irqstats threads proc_pri vmstat if_err_* exim_* netstat fw_forwarded_local fw_packets forks open_files users nfs* iostat_ios ntp* df_abs entropy 2>/dev/null

	case $HOSTNAME in

			ionos1-a*|ionos10*|codethink16*|osuosl*) [ -L /etc/munin/plugins/squid_cache ] || for i in squid_cache squid_objectsize squid_requests squid_traffic ; do sudo ln -s /usr/share/munin/plugins/$i $i ; done ;;