[ENHANCEMENT] fail2ban for grommunio

WalterH
I will have a look,
Could you set the umask to 0644 and also set the newline or just an empty line at the end of every file?
@WalterH Thanks for the umask and this is my reason for the newline.

Currently i haven't tested it at all. Just writing helpful scripts for us in our local GIT-Repo when there is time between Work.

EDIT: Not finished but for now...

> cat setup/fail2ban/install.sh -p
#!/bin/bash
export DEBIAN_FRONTEND=noninteractive
dpkg-reconfigure debconf -f readline -p critical
#DEB_FRONT AND debconf[..  just to be safe
#SCRIPT_DIR="$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )"
#ENFORCE-ROOT
if [[ $EUID -ne 0 ]]; then
  echo "ERROR: $0 Must be run as root, Script terminating" ;exit 7
fi
#SNIP-SUDO
#SUDO=''
#if [[ $EUID -ne 0 ]]; then
#  SUDO='sudo'
#fi

DESTEMAIL='monitoring@domain.tld'
SENDER='fail2ban-grommunio@domain.tld'
IGNOREIP="127.0.0.1 ::1"

WALTERS_PACKAGE="https://www.hofstaedtler.com/tmp/fail2ban_grommunio_wh.tgz"
JAIL_LOCAL="/etc/fail2ban/jail.local"
SYNC_CONF="/etc/grommunio-sync/grommunio-sync.conf.php"

#SC2015 ... ignored..
grep -qF -- "suse" /etc/os-release && (zypper ref && zypper -n up) || (apt-get update && apt-get dist-upgrade --yes)

#SNIP-DEBINSTALL
#PACKAGES=("fail2ban")
#pkg_install() {
#  for pkg in "$@"; do
#    is_pkg_installed=$(dpkg-query -W --showformat='${Status}' "${pkg}" | grep "install ok installed")
#    if [ "${is_pkg_installed}" == "install ok installed" ]; then
#      echo "${pkg}" ist installiert.
#    else
#      apt-get install -f "${pkg}" --yes
#    fi
#  done
#}
#pkg_install "${PACKAGES[$@]}"

wget $WALTERS_PACKAGE -O src.tgz

if [[ -f "$JAIL_LOCAL" ]]; then
  tar xvfz src.tgz -C / --exclude=etc/fail2ban/jail.local
  grep -qF -- "grommmunio" $JAIL_LOCAL && (tar -axf src.tgz etc/fail2ban/jail.local -O | sed -n '/^\[grommunio-web-auth/, $p' >> $JAIL_LOCAL)
else
  tar xfvz src.tgz -C /
fi
#SNIP-FILEBAKDATE
sed -i."$(date +%Y%m%d%H%M)".bak '' $SYNC_CONF
sed -i "s|LOGAUTHFAIL', false|LOGAUTHFAIL', true|g" $SYNC_CONF
#IF NOT EMPTY
if [[ -z "$IGNOREIP" ]]; then
  sed -i -e '/^ignoreip = / s/= .*/= '"$IGNOREIP"'/' $JAIL_LOCAL
fi
sed -i -e '/^destemail = / s/= .*/= '$DESTEMAIL'/' $JAIL_LOCAL
sed -i -e '/^sender = / s/= .*/= '$SENDER'/' $JAIL_LOCAL

systemctl restart fail2ban

improvements welcome

Please note, today's update (08.11.2023) changed the location for most log files, please read: https://community.grommunio.com/d/1281-prepare-for-the-ews-grommunio-2023111-release/2
To switch the log location in jail.local, you may use this command:
sed -i 's: /var/log/grommunio/: /var/log/nginx/:g' /etc/fail2ban/jail.local
Currently the tar archive contains the old log paths, will be fixed in the next days.

Leider funktioniert das Installationscript nicht mehr: Unter Suse 15.5

tar_fail2ban_wh.sh
etc/fail2ban/filter.d/grommunio-sync.conf
etc/fail2ban/filter.d/grommunio-web-auth.conf
etc/nginx/conf.d/x-forewarded-for.conf
Failed to restart fail2ban.service: Unit fail2ban.service not found.

zypper in fail2ban

Repository-Daten werden geladen...
Installierte Pakete werden gelesen...
Paketabhängigkeiten werden aufgelöst...
Problem: das zu installierende fail2ban-0.11.2-150400.2.4.noarch erfordert 'ed', aber diese Anforderung kann nicht bereitgestellt werden
Nicht installierbare Anbieter: ed-1.17-150400.1.5.x86_64[base]
Lösung 1: Deinstallation von busybox-ed-1.35.0-150400.4.5.1.noarch
Lösung 2: fail2ban-0.11.2-150400.2.4.noarch nicht installieren
Lösung 3: fail2ban-0.11.2-150400.2.4.noarch durch Ignorieren einiger Abhängigkeiten brechen
Wählen Sie aus den obigen Lösungen mittels Nummer oder brechen Sie (a)b [1/2/3/a/d/?] (a):