Add fail2ban and firewalld and test out with hedwig.

states/debian/init.sls

@@ -13,3 +13,9 @@ ntp:
   service.running:
     - require:
       - pkg: ntp
+
+firewalld:
+  pkg.installed: []
+  service.running:
+    - enable: true
+    - restart: true

states/fail2ban/init.sls

@@ -0,0 +1,5 @@
+fail2ban:
+  pkg.installed: []
+  service.running:
+    - enable: True
+    - reload: True

states/firewalls/hedwig.sls

@@ -0,0 +1,8 @@
+hedwig_public:
+  firewalld.present:
+    - name: public
+    - default: False
+    - ports:
+      - 22/tcp
+    - require:
+      - firewalld

states/top.sls

@@ -4,6 +4,8 @@ base:
   
   'hedwig.lunch.org.uk':
     - debian
+    - fail2ban
+    - firewalls/hedwig
 
   'scabbers.lunch.org.uk':
     - debian