WalterH
I will have a look,
Could you set the umask to 0644 and also set the newline or just an empty line at the end of every file?
@WalterH Thanks for the umask and this is my reason for the newline.
Currently i haven't tested it at all. Just writing helpful scripts for us in our local GIT-Repo when there is time between Work.
EDIT: Not finished but for now...
> cat setup/fail2ban/install.sh -p
#!/bin/bash
export DEBIAN_FRONTEND=noninteractive
dpkg-reconfigure debconf -f readline -p critical
#DEB_FRONT AND debconf[.. just to be safe
#SCRIPT_DIR="$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )"
#ENFORCE-ROOT
if [[ $EUID -ne 0 ]]; then
echo "ERROR: $0 Must be run as root, Script terminating" ;exit 7
fi
#SNIP-SUDO
#SUDO=''
#if [[ $EUID -ne 0 ]]; then
# SUDO='sudo'
#fi
DESTEMAIL='monitoring@domain.tld'
SENDER='fail2ban-grommunio@domain.tld'
IGNOREIP="127.0.0.1 ::1"
WALTERS_PACKAGE="https://www.hofstaedtler.com/tmp/fail2ban_grommunio_wh.tgz"
JAIL_LOCAL="/etc/fail2ban/jail.local"
SYNC_CONF="/etc/grommunio-sync/grommunio-sync.conf.php"
#SC2015 ... ignored..
grep -qF -- "suse" /etc/os-release && (zypper ref && zypper -n up) || (apt-get update && apt-get dist-upgrade --yes)
#SNIP-DEBINSTALL
#PACKAGES=("fail2ban")
#pkg_install() {
# for pkg in "$@"; do
# is_pkg_installed=$(dpkg-query -W --showformat='${Status}' "${pkg}" | grep "install ok installed")
# if [ "${is_pkg_installed}" == "install ok installed" ]; then
# echo "${pkg}" ist installiert.
# else
# apt-get install -f "${pkg}" --yes
# fi
# done
#}
#pkg_install "${PACKAGES[$@]}"
wget $WALTERS_PACKAGE -O src.tgz
if [[ -f "$JAIL_LOCAL" ]]; then
tar xvfz src.tgz -C / --exclude=etc/fail2ban/jail.local
grep -qF -- "grommmunio" $JAIL_LOCAL && (tar -axf src.tgz etc/fail2ban/jail.local -O | sed -n '/^\[grommunio-web-auth/, $p' >> $JAIL_LOCAL)
else
tar xfvz src.tgz -C /
fi
#SNIP-FILEBAKDATE
sed -i."$(date +%Y%m%d%H%M)".bak '' $SYNC_CONF
sed -i "s|LOGAUTHFAIL', false|LOGAUTHFAIL', true|g" $SYNC_CONF
#IF NOT EMPTY
if [[ -z "$IGNOREIP" ]]; then
sed -i -e '/^ignoreip = / s/= .*/= '"$IGNOREIP"'/' $JAIL_LOCAL
fi
sed -i -e '/^destemail = / s/= .*/= '$DESTEMAIL'/' $JAIL_LOCAL
sed -i -e '/^sender = / s/= .*/= '$SENDER'/' $JAIL_LOCAL
systemctl restart fail2ban
