From fd0714e00daf4d13ca6f4c66b0d0748d867f8b0f Mon Sep 17 00:00:00 2001
From: Jim Hague <jim@lunch.org.uk>
Date: Mon, 27 Feb 2023 14:49:09 +0000
Subject: [PATCH] Add fail2ban and firewalld to scabbers.

---
 states/firewalls/scabbers.sls | 10 ++++++++++
 states/top.sls                |  2 ++
 2 files changed, 12 insertions(+)
 create mode 100644 states/firewalls/scabbers.sls

diff --git a/states/firewalls/scabbers.sls b/states/firewalls/scabbers.sls
new file mode 100644
index 0000000..40ad050
--- /dev/null
+++ b/states/firewalls/scabbers.sls
@@ -0,0 +1,10 @@
+scabbers_public:
+  firewalld.present:
+    - name: public
+    - default: False
+    - ports:
+      - 22/tcp
+      - 80/tcp
+      - 443/tcp
+    - require:
+      - firewalld
diff --git a/states/top.sls b/states/top.sls
index 1544f48..797148a 100644
--- a/states/top.sls
+++ b/states/top.sls
@@ -11,6 +11,8 @@ base:
     - debian
     - certificates
     - apache
+    - fail2ban
+    - firewalls/scabbers
     - jenkins
     - jenkins/worker
     - mercurial