You've already forked prometheus-fail2ban-exporter
Compare commits
1 Commits
4ed0833231
..
0.0.0
| Author | SHA1 | Date | |
|---|---|---|---|
 Hector
|
5e52baa4cf |
@@ -1 +0,0 @@
|
|||||||
prometheus-fail2ban-exporter
|
|
||||||
@@ -1,13 +0,0 @@
|
|||||||
# Editor configuration, see http://editorconfig.org
|
|
||||||
root = true
|
|
||||||
|
|
||||||
[*]
|
|
||||||
charset = utf-8
|
|
||||||
end_of_line = lf
|
|
||||||
indent_size = 2
|
|
||||||
indent_style = space
|
|
||||||
insert_final_newline = false
|
|
||||||
trim_trailing_whitespace = true
|
|
||||||
|
|
||||||
[{Makefile,*.go}]
|
|
||||||
indent_style = tab
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
name: "Lint Golang files"
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
types: [ "opened", "reopened", "synchronize" ]
|
|
||||||
push:
|
|
||||||
branches: [ '**' ]
|
|
||||||
tags-ignore: [ '**' ]
|
|
||||||
workflow_dispatch: {}
|
|
||||||
|
|
||||||
permissions:
|
|
||||||
contents: read
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
golangci:
|
|
||||||
name: "Run golang CI linter"
|
|
||||||
runs-on: ${{ matrix.os }}
|
|
||||||
strategy:
|
|
||||||
matrix:
|
|
||||||
go: [ stable ]
|
|
||||||
os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
|
|
||||||
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
|
|
||||||
with:
|
|
||||||
go-version: ${{ matrix.go }}
|
|
||||||
- uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
|
|
||||||
with:
|
|
||||||
version: v2.12.2 # renovate: datasource=github-releases depName=golangci/golangci-lint
|
|
||||||
@@ -1,57 +0,0 @@
|
|||||||
name: "Run Golang tests"
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
types: [ "opened", "reopened", "synchronize" ]
|
|
||||||
push:
|
|
||||||
branches: [ '**' ]
|
|
||||||
tags-ignore: [ '**' ]
|
|
||||||
workflow_dispatch: {}
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
# integration-test:
|
|
||||||
# name: "Run integration tests"
|
|
||||||
# runs-on: ${{ matrix.os }}
|
|
||||||
# strategy:
|
|
||||||
# matrix:
|
|
||||||
# go: [ stable ]
|
|
||||||
# os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
|
|
||||||
# steps:
|
|
||||||
# - uses: actions/checkout@v4.3.0
|
|
||||||
# - uses: actions/setup-go@v5.5.0
|
|
||||||
# with:
|
|
||||||
# go-version: ${{ matrix.go }}
|
|
||||||
# - env:
|
|
||||||
# GOPROXY: ${{ vars.GOPROXY }}
|
|
||||||
# run: make test/integration
|
|
||||||
|
|
||||||
unit-test:
|
|
||||||
name: "Run unit tests"
|
|
||||||
runs-on: ${{ matrix.os }}
|
|
||||||
strategy:
|
|
||||||
matrix:
|
|
||||||
go: [ stable ]
|
|
||||||
os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
|
|
||||||
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
|
|
||||||
with:
|
|
||||||
go-version: ${{ matrix.go }}
|
|
||||||
- env:
|
|
||||||
GOPROXY: ${{ vars.GOPROXY }}
|
|
||||||
run: make test/unit
|
|
||||||
- id: coverage
|
|
||||||
name: Check coverage
|
|
||||||
run: |
|
|
||||||
coverage="$(make test/coverage | grep total | awk '{ print substr($3, 1, length($3)-1); }')"
|
|
||||||
echo "total_coverage=$coverage" >> $GITHUB_OUTPUT
|
|
||||||
echo "Total coverage: ${coverage}%"
|
|
||||||
- name: Fail if coverage is to low
|
|
||||||
run: |
|
|
||||||
threshold=5
|
|
||||||
total_coverage=${{ steps.coverage.outputs.total_coverage }}
|
|
||||||
|
|
||||||
if (( ${total_coverage%.*} < ${threshold} )); then
|
|
||||||
echo "ERROR: Coverage (${total_coverage}%) is below the threshold (${threshold}%)." 1>&2
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
@@ -1,19 +0,0 @@
|
|||||||
name: "Lint Markdown files"
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
types: [ "opened", "reopened", "synchronize" ]
|
|
||||||
push:
|
|
||||||
branches: [ '*' ]
|
|
||||||
tags-ignore: [ '*' ]
|
|
||||||
workflow_dispatch: {}
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
markdown-lint:
|
|
||||||
name: "Run markdown linter"
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
|
|
||||||
- uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
|
|
||||||
with:
|
|
||||||
globs: '**/*.md'
|
|
||||||
@@ -1,53 +0,0 @@
|
|||||||
name: "Release"
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
tags: [ '**' ]
|
|
||||||
|
|
||||||
permissions:
|
|
||||||
contents: write
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
release:
|
|
||||||
name: "Release application"
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
|
|
||||||
- uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
|
|
||||||
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
|
|
||||||
with:
|
|
||||||
go-version: stable
|
|
||||||
- uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
|
|
||||||
with:
|
|
||||||
registry: git.cryptic.systems
|
|
||||||
username: ${{ github.repository_owner }}
|
|
||||||
password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
|
|
||||||
- env:
|
|
||||||
GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
|
|
||||||
GONOSUMDB: ${{ vars.GONOSUMDB }}
|
|
||||||
GOPROXY: ${{ vars.GOPROXY }}
|
|
||||||
uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
|
|
||||||
with:
|
|
||||||
version: v2.16.0 # renovate: datasource=github-releases depName=goreleaser/goreleaser
|
|
||||||
args: release --clean
|
|
||||||
|
|
||||||
sync-to-hub-docker-io:
|
|
||||||
name: "Upload Images to docker.io"
|
|
||||||
needs:
|
|
||||||
- release
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Copy images to docker.io
|
|
||||||
run: |
|
|
||||||
TAG=$(echo ${{ github.ref_name }} | sed 's/v//gm')
|
|
||||||
|
|
||||||
apt-get update --yes
|
|
||||||
apt-get install --yes skopeo
|
|
||||||
skopeo copy \
|
|
||||||
--all \
|
|
||||||
--dest-password ${{ secrets.DOCKER_IO_PASSWORD }} \
|
|
||||||
--dest-username ${{ secrets.DOCKER_IO_USERNAME }} \
|
|
||||||
--src-password ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }} \
|
|
||||||
--src-username volker.raschek \
|
|
||||||
docker://git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter:${TAG} \
|
|
||||||
docker://docker.io/volkerraschek/prometheus-fail2ban-exporter:${TAG}
|
|
||||||
@@ -1,20 +0,0 @@
|
|||||||
name: Update Docker Hub Description
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches: [ 'master' ]
|
|
||||||
paths: [ 'README.md' ]
|
|
||||||
workflow_dispatch: {}
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
update-description-on-hub-docker-io:
|
|
||||||
runs-on:
|
|
||||||
- ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
|
|
||||||
- uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
|
|
||||||
with:
|
|
||||||
username: ${{ secrets.DOCKER_IO_USERNAME }}
|
|
||||||
password: ${{ secrets.DOCKER_IO_PASSWORD }}
|
|
||||||
repository: volkerraschek/prometheus-fail2ban-exporter
|
|
||||||
readme-filepath: README.md
|
|
||||||
+6
-3
@@ -1,3 +1,6 @@
|
|||||||
prometheus-fail2ban-exporter
|
.idea/
|
||||||
coverage.*
|
vendor/
|
||||||
dist
|
*.iml
|
||||||
|
|
||||||
|
build/
|
||||||
|
dist/
|
||||||
|
|||||||
@@ -0,0 +1,22 @@
|
|||||||
|
image: golang:latest
|
||||||
|
|
||||||
|
before_script:
|
||||||
|
- make install-deps
|
||||||
|
|
||||||
|
stages:
|
||||||
|
- test
|
||||||
|
|
||||||
|
format:
|
||||||
|
stage: test
|
||||||
|
script:
|
||||||
|
- make format
|
||||||
|
|
||||||
|
dependencies:
|
||||||
|
stage: test
|
||||||
|
script:
|
||||||
|
- make go-mod-tidy
|
||||||
|
|
||||||
|
test:
|
||||||
|
stage: test
|
||||||
|
script:
|
||||||
|
- make test
|
||||||
@@ -1,13 +0,0 @@
|
|||||||
version: "2"
|
|
||||||
linters:
|
|
||||||
default: standard
|
|
||||||
enable:
|
|
||||||
- errname
|
|
||||||
- gosec
|
|
||||||
|
|
||||||
exclusions:
|
|
||||||
rules: []
|
|
||||||
warn-unused: true
|
|
||||||
|
|
||||||
run:
|
|
||||||
tests: true
|
|
||||||
@@ -1,175 +0,0 @@
|
|||||||
project_name: prometheus-fail2ban-exporter
|
|
||||||
|
|
||||||
archives:
|
|
||||||
- formats: [ "tar.xz" ]
|
|
||||||
files:
|
|
||||||
- README.md
|
|
||||||
- LICENSE
|
|
||||||
|
|
||||||
before:
|
|
||||||
hooks:
|
|
||||||
- go mod tidy
|
|
||||||
|
|
||||||
builds:
|
|
||||||
- main: main.go
|
|
||||||
binary: >-
|
|
||||||
{{ .ProjectName }}-
|
|
||||||
{{- .Version }}-
|
|
||||||
{{- .Os }}-
|
|
||||||
{{- if eq .Arch "amd64" }}amd64
|
|
||||||
{{- else if eq .Arch "amd64_v1" }}amd64
|
|
||||||
{{- else }}{{ .Arch }}{{ end }}
|
|
||||||
{{- if .Arm }}-{{ .Arm }}{{ end }}
|
|
||||||
env:
|
|
||||||
- CGO_ENABLED=0
|
|
||||||
- GONOSUMDB={{ .Env.GONOSUMDB }}
|
|
||||||
- GOPROXY={{ .Env.GOPROXY }}
|
|
||||||
goos:
|
|
||||||
- linux
|
|
||||||
goarch:
|
|
||||||
- amd64
|
|
||||||
- arm
|
|
||||||
- arm64
|
|
||||||
- riscv64
|
|
||||||
goarm:
|
|
||||||
- "6"
|
|
||||||
- "7"
|
|
||||||
flags:
|
|
||||||
- -trimpath
|
|
||||||
ldflags:
|
|
||||||
- -s -w -X 'main.version={{ trimprefix .Tag "v" }}' -X 'main.date={{ time "2006-01-02T15:04:05Z07:00" }}'
|
|
||||||
|
|
||||||
changelog:
|
|
||||||
filters:
|
|
||||||
exclude:
|
|
||||||
- '^chore'
|
|
||||||
- '^docs'
|
|
||||||
- '^test'
|
|
||||||
- Merge pull request
|
|
||||||
- Merge branch
|
|
||||||
- go mod tidy
|
|
||||||
format: "{{.SHA}}: {{.Message}} (@{{.AuthorUsername}})"
|
|
||||||
groups:
|
|
||||||
- title: Features
|
|
||||||
regexp: '^.*?feat(\([[:word:]]+\))??!?:.+$'
|
|
||||||
order: 0
|
|
||||||
- title: "Bug fixes"
|
|
||||||
regexp: '^.*?fix(\([[:word:]]+\))??!?:.+$'
|
|
||||||
order: 1
|
|
||||||
- title: Others
|
|
||||||
order: 999
|
|
||||||
sort: asc
|
|
||||||
use: git
|
|
||||||
|
|
||||||
dockers:
|
|
||||||
- build_flag_templates:
|
|
||||||
- --label=org.opencontainers.image.created={{ time "2006-01-02T15:04:05Z07:00" }}
|
|
||||||
- --label=org.opencontainers.image.description={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.documentation={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.revision={{ .FullCommit }}
|
|
||||||
- --label=org.opencontainers.image.source={{ .GitURL }}
|
|
||||||
- --label=org.opencontainers.image.title={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.url=https://git.cryptic.systems/volker.raschek/{{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.version={{ trimprefix .Tag "v" }}
|
|
||||||
- --platform=linux/amd64
|
|
||||||
- --pull
|
|
||||||
dockerfile: Dockerfile
|
|
||||||
goarch: amd64
|
|
||||||
goos: linux
|
|
||||||
image_templates:
|
|
||||||
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}-amd64'
|
|
||||||
skip_push: false
|
|
||||||
use: buildx
|
|
||||||
|
|
||||||
- build_flag_templates:
|
|
||||||
- --label=org.opencontainers.image.created={{ time "2006-01-02T15:04:05Z07:00" }}
|
|
||||||
- --label=org.opencontainers.image.description={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.documentation={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.revision={{ .FullCommit }}
|
|
||||||
- --label=org.opencontainers.image.source={{ .GitURL }}
|
|
||||||
- --label=org.opencontainers.image.title={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.url=https://git.cryptic.systems/volker.raschek/{{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.version={{ trimprefix .Tag "v" }}
|
|
||||||
- --platform=linux/arm/v6
|
|
||||||
- --pull
|
|
||||||
dockerfile: Dockerfile
|
|
||||||
goarch: arm
|
|
||||||
goarm: "6"
|
|
||||||
goos: linux
|
|
||||||
image_templates:
|
|
||||||
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}-arm-v6'
|
|
||||||
skip_push: false
|
|
||||||
use: buildx
|
|
||||||
|
|
||||||
- build_flag_templates:
|
|
||||||
- --label=org.opencontainers.image.created={{ time "2006-01-02T15:04:05Z07:00" }}
|
|
||||||
- --label=org.opencontainers.image.description={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.documentation={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.revision={{ .FullCommit }}
|
|
||||||
- --label=org.opencontainers.image.source={{ .GitURL }}
|
|
||||||
- --label=org.opencontainers.image.title={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.url=https://git.cryptic.systems/volker.raschek/{{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.version={{ trimprefix .Tag "v" }}
|
|
||||||
- --platform=linux/arm/v7
|
|
||||||
- --pull
|
|
||||||
dockerfile: Dockerfile
|
|
||||||
goarch: arm
|
|
||||||
goarm: "7"
|
|
||||||
goos: linux
|
|
||||||
image_templates:
|
|
||||||
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}-arm-v7'
|
|
||||||
skip_push: false
|
|
||||||
use: buildx
|
|
||||||
|
|
||||||
- build_flag_templates:
|
|
||||||
- --label=org.opencontainers.image.created={{ time "2006-01-02T15:04:05Z07:00" }}
|
|
||||||
- --label=org.opencontainers.image.description={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.documentation={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.revision={{ .FullCommit }}
|
|
||||||
- --label=org.opencontainers.image.source={{ .GitURL }}
|
|
||||||
- --label=org.opencontainers.image.title={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.url=https://git.cryptic.systems/volker.raschek/{{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.version={{ trimprefix .Tag "v" }}
|
|
||||||
- --platform=linux/arm64
|
|
||||||
- --pull
|
|
||||||
dockerfile: Dockerfile
|
|
||||||
goarch: arm64
|
|
||||||
goos: linux
|
|
||||||
image_templates:
|
|
||||||
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}-arm64'
|
|
||||||
skip_push: false
|
|
||||||
use: buildx
|
|
||||||
|
|
||||||
- build_flag_templates:
|
|
||||||
- --label=org.opencontainers.image.created={{ time "2006-01-02T15:04:05Z07:00" }}
|
|
||||||
- --label=org.opencontainers.image.description={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.documentation={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.revision={{ .FullCommit }}
|
|
||||||
- --label=org.opencontainers.image.source={{ .GitURL }}
|
|
||||||
- --label=org.opencontainers.image.title={{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.url=https://git.cryptic.systems/volker.raschek/{{ .ProjectName }}
|
|
||||||
- --label=org.opencontainers.image.version={{ trimprefix .Tag "v" }}
|
|
||||||
- --platform=linux/riscv64
|
|
||||||
- --pull
|
|
||||||
dockerfile: Dockerfile
|
|
||||||
goarch: riscv64
|
|
||||||
goos: linux
|
|
||||||
image_templates:
|
|
||||||
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}-riscv64'
|
|
||||||
skip_push: false
|
|
||||||
use: buildx
|
|
||||||
|
|
||||||
docker_manifests:
|
|
||||||
- name_template: 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}'
|
|
||||||
image_templates:
|
|
||||||
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}-amd64'
|
|
||||||
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}-arm-v6'
|
|
||||||
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}-arm-v7'
|
|
||||||
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}-arm64'
|
|
||||||
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}:{{ trimprefix .Tag "v" }}-riscv64'
|
|
||||||
|
|
||||||
gitea_urls:
|
|
||||||
api: https://git.cryptic.systems/api/v1
|
|
||||||
download: https://git.cryptic.systems
|
|
||||||
|
|
||||||
version: 2
|
|
||||||
@@ -1,136 +0,0 @@
|
|||||||
# markdownlint YAML configuration
|
|
||||||
# https://github.com/DavidAnson/markdownlint/blob/main/schema/.markdownlint.yaml
|
|
||||||
|
|
||||||
# Default state for all rules
|
|
||||||
default: true
|
|
||||||
|
|
||||||
# Path to configuration file to extend
|
|
||||||
extends: null
|
|
||||||
|
|
||||||
# MD003/heading-style/header-style - Heading style
|
|
||||||
MD003:
|
|
||||||
# Heading style
|
|
||||||
style: "atx"
|
|
||||||
|
|
||||||
# MD004/ul-style - Unordered list style
|
|
||||||
MD004:
|
|
||||||
style: "dash"
|
|
||||||
|
|
||||||
# MD007/ul-indent - Unordered list indentation
|
|
||||||
MD007:
|
|
||||||
# Spaces for indent
|
|
||||||
indent: 2
|
|
||||||
# Whether to indent the first level of the list
|
|
||||||
start_indented: false
|
|
||||||
|
|
||||||
# MD009/no-trailing-spaces - Trailing spaces
|
|
||||||
MD009:
|
|
||||||
# Spaces for line break
|
|
||||||
br_spaces: 2
|
|
||||||
# Allow spaces for empty lines in list items
|
|
||||||
list_item_empty_lines: false
|
|
||||||
# Include unnecessary breaks
|
|
||||||
strict: false
|
|
||||||
|
|
||||||
# MD010/no-hard-tabs - Hard tabs
|
|
||||||
MD010:
|
|
||||||
# Include code blocks
|
|
||||||
code_blocks: true
|
|
||||||
|
|
||||||
# MD012/no-multiple-blanks - Multiple consecutive blank lines
|
|
||||||
MD012:
|
|
||||||
# Consecutive blank lines
|
|
||||||
maximum: 1
|
|
||||||
|
|
||||||
# MD013/line-length - Line length
|
|
||||||
MD013:
|
|
||||||
# Number of characters
|
|
||||||
line_length: 120
|
|
||||||
# Number of characters for headings
|
|
||||||
heading_line_length: 120
|
|
||||||
# Number of characters for code blocks
|
|
||||||
code_block_line_length: 120
|
|
||||||
# Include code blocks
|
|
||||||
code_blocks: false
|
|
||||||
# Include tables
|
|
||||||
tables: false
|
|
||||||
# Include headings
|
|
||||||
headings: true
|
|
||||||
# Strict length checking
|
|
||||||
strict: false
|
|
||||||
# Stern length checking
|
|
||||||
stern: false
|
|
||||||
|
|
||||||
# MD022/blanks-around-headings/blanks-around-headers - Headings should be surrounded by blank lines
|
|
||||||
MD022:
|
|
||||||
# Blank lines above heading
|
|
||||||
lines_above: 1
|
|
||||||
# Blank lines below heading
|
|
||||||
lines_below: 1
|
|
||||||
|
|
||||||
# MD025/single-title/single-h1 - Multiple top-level headings in the same document
|
|
||||||
MD025:
|
|
||||||
# Heading level
|
|
||||||
level: 1
|
|
||||||
# RegExp for matching title in front matter
|
|
||||||
front_matter_title: "^\\s*title\\s*[:=]"
|
|
||||||
|
|
||||||
# MD026/no-trailing-punctuation - Trailing punctuation in heading
|
|
||||||
MD026:
|
|
||||||
# Punctuation characters
|
|
||||||
punctuation: ".,;:!。，；：！"
|
|
||||||
|
|
||||||
# MD029/ol-prefix - Ordered list item prefix
|
|
||||||
MD029:
|
|
||||||
# List style
|
|
||||||
style: "one_or_ordered"
|
|
||||||
|
|
||||||
# MD030/list-marker-space - Spaces after list markers
|
|
||||||
MD030:
|
|
||||||
# Spaces for single-line unordered list items
|
|
||||||
ul_single: 1
|
|
||||||
# Spaces for single-line ordered list items
|
|
||||||
ol_single: 1
|
|
||||||
# Spaces for multi-line unordered list items
|
|
||||||
ul_multi: 1
|
|
||||||
# Spaces for multi-line ordered list items
|
|
||||||
ol_multi: 1
|
|
||||||
|
|
||||||
# MD033/no-inline-html - Inline HTML
|
|
||||||
MD033:
|
|
||||||
# Allowed elements
|
|
||||||
allowed_elements: []
|
|
||||||
|
|
||||||
# MD035/hr-style - Horizontal rule style
|
|
||||||
MD035:
|
|
||||||
# Horizontal rule style
|
|
||||||
style: "---"
|
|
||||||
|
|
||||||
# MD036/no-emphasis-as-heading/no-emphasis-as-header - Emphasis used instead of a heading
|
|
||||||
MD036:
|
|
||||||
# Punctuation characters
|
|
||||||
punctuation: ".,;:!?。，；：！？"
|
|
||||||
|
|
||||||
# MD041/first-line-heading/first-line-h1 - First line in a file should be a top-level heading
|
|
||||||
MD041:
|
|
||||||
# Heading level
|
|
||||||
level: 1
|
|
||||||
# RegExp for matching title in front matter
|
|
||||||
front_matter_title: "^\\s*title\\s*[:=]"
|
|
||||||
|
|
||||||
# MD044/proper-names - Proper names should have the correct capitalization
|
|
||||||
MD044:
|
|
||||||
# List of proper names
|
|
||||||
names: []
|
|
||||||
# Include code blocks
|
|
||||||
code_blocks: false
|
|
||||||
|
|
||||||
# MD046/code-block-style - Code block style
|
|
||||||
MD046:
|
|
||||||
# Block style
|
|
||||||
style: "fenced"
|
|
||||||
|
|
||||||
# MD048/code-fence-style - Code fence style
|
|
||||||
MD048:
|
|
||||||
# Code fence syle
|
|
||||||
style: "backtick"
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
FROM scratch AS build
|
|
||||||
|
|
||||||
COPY prometheus-fail2ban-exporter-* /usr/bin/prometheus-fail2ban-exporter
|
|
||||||
|
|
||||||
ENTRYPOINT [ "/usr/bin/prometheus-fail2ban-exporter" ]
|
|
||||||
@@ -1,7 +1,6 @@
|
|||||||
MIT License
|
MIT License
|
||||||
|
|
||||||
Copyright (c) 2021 Hector
|
Copyright (c) 2021 Hector
|
||||||
Copyright (c) 2023 Markus Pesch
|
|
||||||
|
|
||||||
Permission is hereby granted, free of charge, to any person obtaining a copy
|
Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||||
of this software and associated documentation files (the "Software"), to deal
|
of this software and associated documentation files (the "Software"), to deal
|
||||||
|
|||||||
@@ -1,118 +1,15 @@
|
|||||||
EXECUTABLE=prometheus-fail2ban-exporter
|
install-deps:
|
||||||
VERSION?=$(shell git describe --abbrev=0)+hash.$(shell git rev-parse --short HEAD)
|
go mod download
|
||||||
|
|
||||||
# Destination directory and prefix to place the compiled binaries, documentaions
|
# Standard go test
|
||||||
# and other files.
|
test:
|
||||||
DESTDIR?=
|
go test ./... -v -race
|
||||||
PREFIX?=/usr/local
|
|
||||||
|
|
||||||
# CONTAINER_RUNTIME
|
# Make sure no unnecessary dependencies are present
|
||||||
# The CONTAINER_RUNTIME variable will be used to specified the path to a
|
go-mod-tidy:
|
||||||
# container runtime. This is needed to start and run a container image.
|
go mod tidy -v
|
||||||
CONTAINER_RUNTIME?=$(shell which podman)
|
git diff-index --quiet HEAD
|
||||||
|
|
||||||
# PROM_FAIL2BAN_EXP_IMAGE_REGISTRY_NAME
|
format:
|
||||||
# Defines the name of the new container to be built using several variables.
|
go fmt $(go list ./... | grep -v /vendor/)
|
||||||
PROM_FAIL2BAN_EXP_IMAGE_REGISTRY_NAME:=git.cryptic.systems
|
go vet $(go list ./... | grep -v /vendor/)
|
||||||
PROM_FAIL2BAN_EXP_IMAGE_REGISTRY_USER:=volker.raschek
|
|
||||||
|
|
||||||
PROM_FAIL2BAN_EXP_IMAGE_NAMESPACE?=${PROM_FAIL2BAN_EXP_IMAGE_REGISTRY_USER}
|
|
||||||
PROM_FAIL2BAN_EXP_IMAGE_NAME:=${EXECUTABLE}
|
|
||||||
PROM_FAIL2BAN_EXP_IMAGE_VERSION?=latest
|
|
||||||
PROM_FAIL2BAN_EXP_IMAGE_FULLY_QUALIFIED=${PROM_FAIL2BAN_EXP_IMAGE_REGISTRY_NAME}/${PROM_FAIL2BAN_EXP_IMAGE_NAMESPACE}/${PROM_FAIL2BAN_EXP_IMAGE_NAME}:${PROM_FAIL2BAN_EXP_IMAGE_VERSION}
|
|
||||||
|
|
||||||
# BIN
|
|
||||||
# ==============================================================================
|
|
||||||
prometheus-fail2ban-exporter:
|
|
||||||
CGO_ENABLED=0 \
|
|
||||||
GOPROXY=$(shell go env GOPROXY) \
|
|
||||||
go build -ldflags "-X 'main.version=${VERSION}' -X 'main.date=$(shell date --rfc-3339=seconds )'" -o ${@} main.go
|
|
||||||
|
|
||||||
# CLEAN
|
|
||||||
# ==============================================================================
|
|
||||||
PHONY+=clean
|
|
||||||
clean:
|
|
||||||
rm --force --recursive prometheus-fail2ban-exporter
|
|
||||||
|
|
||||||
# TESTS
|
|
||||||
# ==============================================================================
|
|
||||||
PHONY+=test/unit
|
|
||||||
test/unit:
|
|
||||||
CGO_ENABLED=0 \
|
|
||||||
GOPROXY=$(shell go env GOPROXY) \
|
|
||||||
go test -v -p 1 -coverprofile=coverage.out -covermode=count -timeout 1200s ./...
|
|
||||||
|
|
||||||
PHONY+=test/integration
|
|
||||||
test/integration:
|
|
||||||
CGO_ENABLED=0 \
|
|
||||||
GOPROXY=$(shell go env GOPROXY) \
|
|
||||||
go test -v -p 1 -count=1 -timeout 1200s ./it/...
|
|
||||||
|
|
||||||
PHONY+=test/coverage
|
|
||||||
test/coverage:
|
|
||||||
CGO_ENABLED=0 \
|
|
||||||
GOPROXY=$(shell go env GOPROXY) \
|
|
||||||
go tool cover -func=coverage.out
|
|
||||||
|
|
||||||
# GOLANGCI-LINT
|
|
||||||
# ==============================================================================
|
|
||||||
PHONY+=golangci-lint
|
|
||||||
golangci-lint:
|
|
||||||
golangci-lint run --concurrency=$(shell nproc)
|
|
||||||
|
|
||||||
# INSTALL
|
|
||||||
# ==============================================================================
|
|
||||||
PHONY+=uninstall
|
|
||||||
install: prometheus-fail2ban-exporter
|
|
||||||
install --directory ${DESTDIR}/etc/bash_completion.d
|
|
||||||
./prometheus-fail2ban-exporter completion bash > ${DESTDIR}/etc/bash_completion.d/${EXECUTABLE}
|
|
||||||
|
|
||||||
install --directory ${DESTDIR}${PREFIX}/bin
|
|
||||||
install --mode 0755 ${EXECUTABLE} ${DESTDIR}${PREFIX}/bin/${EXECUTABLE}
|
|
||||||
|
|
||||||
install --directory ${DESTDIR}${PREFIX}/share/licenses/${EXECUTABLE}
|
|
||||||
install --mode 0644 LICENSE ${DESTDIR}${PREFIX}/share/licenses/${EXECUTABLE}/LICENSE
|
|
||||||
|
|
||||||
install --directory ${DESTDIR}${PREFIX}/systemd/system
|
|
||||||
install --mode 0644 systemd/systemd.service ${DESTDIR}${PREFIX}/systemd/system/${EXECUTABLE}.service
|
|
||||||
sed --in-place --regexp-extended 's/EXECUTABLE/${EXECUTABLE}/gm' ${DESTDIR}${PREFIX}/systemd/system/${EXECUTABLE}.service
|
|
||||||
|
|
||||||
# UNINSTALL
|
|
||||||
# ==============================================================================
|
|
||||||
PHONY+=uninstall
|
|
||||||
uninstall:
|
|
||||||
-rm --force --recursive \
|
|
||||||
${DESTDIR}/etc/bash_completion.d/${EXECUTABLE} \
|
|
||||||
${DESTDIR}${PREFIX}/bin/${EXECUTABLE} \
|
|
||||||
${DESTDIR}${PREFIX}/share/licenses/${EXECUTABLE}
|
|
||||||
|
|
||||||
# BUILD CONTAINER IMAGE
|
|
||||||
# ==============================================================================
|
|
||||||
PHONY+=container-image/build
|
|
||||||
container-image/build:
|
|
||||||
${CONTAINER_RUNTIME} build \
|
|
||||||
--build-arg VERSION=${VERSION} \
|
|
||||||
--file Dockerfile \
|
|
||||||
--no-cache \
|
|
||||||
--pull \
|
|
||||||
--tag ${PROM_FAIL2BAN_EXP_IMAGE_FULLY_QUALIFIED} \
|
|
||||||
.
|
|
||||||
|
|
||||||
# DELETE CONTAINER IMAGE
|
|
||||||
# ==============================================================================
|
|
||||||
PHONY:=container-image/delete
|
|
||||||
container-image/delete:
|
|
||||||
- ${CONTAINER_RUNTIME} image rm ${PROM_FAIL2BAN_EXP_IMAGE_FULLY_QUALIFIED}
|
|
||||||
|
|
||||||
# PUSH CONTAINER IMAGE
|
|
||||||
# ==============================================================================
|
|
||||||
PHONY+=container-image/push
|
|
||||||
container-image/push:
|
|
||||||
echo ${PROM_FAIL2BAN_EXP_IMAGE_REGISTRY_PASSWORD} | ${CONTAINER_RUNTIME} login ${PROM_FAIL2BAN_EXP_IMAGE_REGISTRY_NAME} --username ${PROM_FAIL2BAN_EXP_IMAGE_REGISTRY_USER} --password-stdin
|
|
||||||
${CONTAINER_RUNTIME} push ${PROM_FAIL2BAN_EXP_IMAGE_FULLY_QUALIFIED}
|
|
||||||
|
|
||||||
# PHONY
|
|
||||||
# ==============================================================================
|
|
||||||
# Declare the contents of the PHONY variable as phony. We keep that information
|
|
||||||
# in a variable so we can use it in if_changed.
|
|
||||||
.PHONY: ${PHONY}
|
|
||||||
|
|||||||
@@ -1,214 +1,3 @@
|
|||||||
# prometheus-fail2ban-exporter
|
# Fail2Ban Prometheus Exporter
|
||||||
|
|
||||||
This is a fork of Hector's fail2ban [exporter](https://gitlab.com/hectorjsmith/fail2ban-prometheus-exporter). This fork
|
Go tool to collect and export metrics on Fail2Ban
|
||||||
contains some changes to get the application running in a kubernetes cluster.
|
|
||||||
|
|
||||||
## Table of Contents
|
|
||||||
|
|
||||||
1. Quick Start
|
|
||||||
2. Metrics
|
|
||||||
3. Configuration
|
|
||||||
4. Building from source
|
|
||||||
5. Textfile metrics
|
|
||||||
|
|
||||||
## 1. Quick Start
|
|
||||||
|
|
||||||
The exporter can be run as a standalone binary or a docker container.
|
|
||||||
|
|
||||||
### 1.1. Standalone
|
|
||||||
|
|
||||||
The following command will start collecting metrics from the `/var/run/fail2ban/fail2ban.sock` file and expose them on
|
|
||||||
port `9191`.
|
|
||||||
|
|
||||||
```bash
|
|
||||||
$ fail2ban_exporter --collector.f2b.socket=/var/run/fail2ban/fail2ban.sock --web.listen-address=":9191"
|
|
||||||
|
|
||||||
2022/02/20 09:54:06 fail2ban exporter version 0.8.1
|
|
||||||
2022/02/20 09:54:06 starting server at :9191
|
|
||||||
2022/02/20 09:54:06 reading metrics from fail2ban socket: /var/run/fail2ban/fail2ban.sock
|
|
||||||
2022/02/20 09:54:06 metrics available at '/metrics'
|
|
||||||
2022/02/20 09:54:06 ready
|
|
||||||
```
|
|
||||||
|
|
||||||
Binary files for each release can be found on the
|
|
||||||
[releases](https://gitlab.com/hectorjsmith/fail2ban-prometheus-exporter/-/releases) page.
|
|
||||||
|
|
||||||
There is also an [example systemd service file](/_examples/systemd/fail2ban_exporter.service) included in the
|
|
||||||
repository. This is a starting point to run the exporter as a service.
|
|
||||||
|
|
||||||
### 1.2. Docker
|
|
||||||
|
|
||||||
#### Docker run
|
|
||||||
|
|
||||||
```bash
|
|
||||||
$ docker run -d \
|
|
||||||
--name "fail2ban-exporter" \
|
|
||||||
-v /var/run/fail2ban:/var/run/fail2ban:ro \
|
|
||||||
-p "9191:9191" \
|
|
||||||
registry.gitlab.com/hectorjsmith/fail2ban-prometheus-exporter:latest
|
|
||||||
```
|
|
||||||
|
|
||||||
#### Docker compose
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
version: "2"
|
|
||||||
services:
|
|
||||||
exporter:
|
|
||||||
image: registry.gitlab.com/hectorjsmith/fail2ban-prometheus-exporter:latest
|
|
||||||
volumes:
|
|
||||||
- /var/run/fail2ban/:/var/run/fail2ban:ro
|
|
||||||
ports:
|
|
||||||
- "9191:9191"
|
|
||||||
```
|
|
||||||
|
|
||||||
Use the `:latest` tag to get the latest stable release. See the [registry
|
|
||||||
page](https://gitlab.com/hectorjsmith/fail2ban-prometheus-exporter/container_registry) for all available tags.
|
|
||||||
|
|
||||||
**NOTE:** While it is possible to mount the `fail2ban.sock` file directly, it is recommended to mount the parent folder
|
|
||||||
instead. The `.sock` file is deleted by fail2ban on shutdown and re-created on startup and this causes problems for the
|
|
||||||
docker mount. See [this reply](https://gitlab.com/hectorjsmith/fail2ban-prometheus-exporter/-/issues/11#note_665003499)
|
|
||||||
for more details.
|
|
||||||
|
|
||||||
## 2. Metrics
|
|
||||||
|
|
||||||
The exporter exposes the following metrics:
|
|
||||||
|
|
||||||
*All metric names are prefixed with `f2b_`*
|
|
||||||
|
|
||||||
| Metric | Description | Example |
|
|
||||||
|------------------------------|------------------------------------------------------------------------------------|-----------------------------------------------------|
|
|
||||||
| `up` | Returns 1 if the exporter is up and running | `f2b_up 1` |
|
|
||||||
| `errors` | Count the number of errors since startup by type | |
|
|
||||||
| `errors{type="socket_conn"}` | Errors connecting to the fail2ban socket (e.g. connection refused) | `f2b_errors{type="socket_conn"} 0` |
|
|
||||||
| `errors{type="socket_req"}` | Errors sending requests to the fail2ban server (e.g. invalid responses) | `f2b_errors{type="socket_req"} 0` |
|
|
||||||
| `jail_count` | Number of jails configured in fail2ban | `f2b_jail_count 2` |
|
|
||||||
| `jail_banned_current` | Number of IPs currently banned per jail | `f2b_jail_banned_current{jail="sshd"} 15` |
|
|
||||||
| `jail_banned_total` | Total number of banned IPs since fail2ban startup per jail (includes expired bans) | `f2b_jail_banned_total{jail="sshd"} 31` |
|
|
||||||
| `jail_failed_current` | Number of current failures per jail | `f2b_jail_failed_current{jail="sshd"} 6` |
|
|
||||||
| `jail_failed_total` | Total number of failures since fail2ban startup per jail | `f2b_jail_failed_total{jail="sshd"} 125` |
|
|
||||||
| `jail_config_ban_time` | How long an IP is banned for in this jail (in seconds) | `f2b_config_jail_ban_time{jail="sshd"} 600` |
|
|
||||||
| `jail_config_find_time` | How far back the filter will look for failures in this jail (in seconds) | `f2b_config_jail_find_time{jail="sshd"} 600` |
|
|
||||||
| `jail_config_max_retry` | The max number of failures allowed before banning an IP in this jail | `f2b_config_jail_max_retries{jail="sshd"} 5` |
|
|
||||||
| `version` | Version string of the exporter and fail2ban | `f2b_version{exporter="0.5.0",fail2ban="0.11.1"} 1` |
|
|
||||||
|
|
||||||
The metrics above correspond to the matching fields in the `fail2ban-client
|
|
||||||
status <jail>` command:
|
|
||||||
|
|
||||||
```text
|
|
||||||
Status for the jail: sshd
|
|
||||||
|- Filter
|
|
||||||
| |- Currently failed: 6
|
|
||||||
| |- Total failed: 125
|
|
||||||
| `- File list: /var/log/auth.log
|
|
||||||
`- Actions
|
|
||||||
|- Currently banned: 15
|
|
||||||
|- Total banned: 31
|
|
||||||
`- Banned IP list: ...
|
|
||||||
```
|
|
||||||
|
|
||||||
### 2.1. Grafana
|
|
||||||
|
|
||||||
The metrics exported by this tool are compatible with Prometheus and Grafana. A sample grafana dashboard can be found in
|
|
||||||
the [grafana.json](/_examples/grafana/dashboard.json) file. Just import the contents of this file into a new Grafana
|
|
||||||
dashboard to get started.
|
|
||||||
|
|
||||||
The dashboard supports displaying data from multiple exporters. Use the `instance` dashboard variable to select which
|
|
||||||
ones to display.
|
|
||||||
|
|
||||||
*(Sample dashboard is compatible with Grafana `9.1.8` and above)*
|
|
||||||
|
|
||||||
## 3. Configuration
|
|
||||||
|
|
||||||
The exporter is configured with CLI flags and environment variables. There are no configuration files.
|
|
||||||
|
|
||||||
### CLI flags
|
|
||||||
|
|
||||||
```text
|
|
||||||
🚀 Collect prometheus metrics from a running Fail2Ban instance
|
|
||||||
|
|
||||||
Flags:
|
|
||||||
-h, --help Show context-sensitive help.
|
|
||||||
-v, --version Show version info and exit
|
|
||||||
--dry-run Attempt to connect to the fail2ban socket then exit
|
|
||||||
before starting the server
|
|
||||||
--web.listen-address=":9191" Address to use for the metrics server
|
|
||||||
($F2B_WEB_LISTEN_ADDRESS)
|
|
||||||
--collector.f2b.socket="/var/run/fail2ban/fail2ban.sock"
|
|
||||||
Path to the fail2ban server socket
|
|
||||||
($F2B_COLLECTOR_SOCKET)
|
|
||||||
--collector.f2b.exit-on-socket-connection-error
|
|
||||||
When set to true the exporter will immediately
|
|
||||||
exit on a fail2ban socket connection error
|
|
||||||
($F2B_EXIT_ON_SOCKET_CONN_ERROR)
|
|
||||||
--collector.textfile.directory=STRING
|
|
||||||
Directory to read text files with metrics from
|
|
||||||
($F2B_COLLECTOR_TEXT_PATH)
|
|
||||||
--web.basic-auth.username=STRING
|
|
||||||
Username to use to protect endpoints with basic auth
|
|
||||||
($F2B_WEB_BASICAUTH_USER)
|
|
||||||
--web.basic-auth.password=STRING
|
|
||||||
Password to use to protect endpoints with basic auth
|
|
||||||
($F2B_WEB_BASICAUTH_PASS)
|
|
||||||
```
|
|
||||||
|
|
||||||
### Environment variables
|
|
||||||
|
|
||||||
Each environment variable corresponds to a CLI flag. If both are specified, the CLI flag takes precedence.
|
|
||||||
|
|
||||||
| Environment variable | Corresponding CLI flag |
|
|
||||||
|---------------------------------|---------------------------------------------------|
|
|
||||||
| `F2B_COLLECTOR_SOCKET` | `--collector.f2b.socket` |
|
|
||||||
| `F2B_COLLECTOR_TEXT_PATH` | `--collector.textfile.directory` |
|
|
||||||
| `F2B_WEB_LISTEN_ADDRESS` | `--web.listen-address` |
|
|
||||||
| `F2B_WEB_BASICAUTH_USER` | `--web.basic-auth.username` |
|
|
||||||
| `F2B_WEB_BASICAUTH_PASS` | `--web.basic-auth.password` |
|
|
||||||
| `F2B_EXIT_ON_SOCKET_CONN_ERROR` | `--collector.f2b.exit-on-socket-connection-error` |
|
|
||||||
|
|
||||||
## 4. Building from source
|
|
||||||
|
|
||||||
Building from source has the following dependencies:
|
|
||||||
|
|
||||||
- Go v1.20
|
|
||||||
- Make
|
|
||||||
|
|
||||||
From there, simply run `make build`
|
|
||||||
|
|
||||||
This will download the necessary dependencies and build a `fail2ban_exporter` binary in the root of the project.
|
|
||||||
|
|
||||||
## 5. Textfile metrics
|
|
||||||
|
|
||||||
For more flexibility the exporter also allows exporting metrics collected from a text file.
|
|
||||||
|
|
||||||
To enable textfile metrics provide the directory to read files from with the `--collector.textfile.directory` flag.
|
|
||||||
|
|
||||||
Metrics collected from these files will be exposed directly alongside the other metrics without any additional
|
|
||||||
processing. This means that it is the responsibility of the file creator to ensure the format is correct.
|
|
||||||
|
|
||||||
By exporting textfile metrics an extra metric is also exported with an error count for each file:
|
|
||||||
|
|
||||||
```text
|
|
||||||
# HELP textfile_error Checks for errors while reading text files
|
|
||||||
# TYPE textfile_error gauge
|
|
||||||
textfile_error{path="file.prom"} 0
|
|
||||||
```
|
|
||||||
|
|
||||||
**NOTE:** Any file not ending with `.prom` will be ignored.
|
|
||||||
|
|
||||||
### Running in Docker
|
|
||||||
|
|
||||||
To collect textfile metrics inside a docker container, a couple of things need to be done:
|
|
||||||
|
|
||||||
1. Mount the folder with the metrics files
|
|
||||||
2. Set the `F2B_COLLECTOR_TEXT_PATH` environment variable
|
|
||||||
|
|
||||||
*For example:*
|
|
||||||
|
|
||||||
```bash
|
|
||||||
$ docker run -d \
|
|
||||||
--name "fail2ban-exporter" \
|
|
||||||
-v /var/run/fail2ban:/var/run/fail2ban:ro \
|
|
||||||
-v /path/to/metrics:/app/metrics/:ro \
|
|
||||||
-e F2B_COLLECTOR_TEXT_PATH=/app/metrics \
|
|
||||||
-p "9191:9191" \
|
|
||||||
registry.gitlab.com/hectorjsmith/fail2ban-prometheus-exporter:latest
|
|
||||||
```
|
|
||||||
|
|||||||
@@ -1,877 +0,0 @@
|
|||||||
{
|
|
||||||
"__inputs": [
|
|
||||||
{
|
|
||||||
"name": "DS_PROMETHEUS",
|
|
||||||
"label": "Prometheus",
|
|
||||||
"description": "",
|
|
||||||
"type": "datasource",
|
|
||||||
"pluginId": "prometheus",
|
|
||||||
"pluginName": "Prometheus"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"__elements": {},
|
|
||||||
"__requires": [
|
|
||||||
{
|
|
||||||
"type": "grafana",
|
|
||||||
"id": "grafana",
|
|
||||||
"name": "Grafana",
|
|
||||||
"version": "9.1.8"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "datasource",
|
|
||||||
"id": "prometheus",
|
|
||||||
"name": "Prometheus",
|
|
||||||
"version": "1.0.0"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "panel",
|
|
||||||
"id": "table",
|
|
||||||
"name": "Table",
|
|
||||||
"version": ""
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"type": "panel",
|
|
||||||
"id": "timeseries",
|
|
||||||
"name": "Time series",
|
|
||||||
"version": ""
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"annotations": {
|
|
||||||
"list": [
|
|
||||||
{
|
|
||||||
"builtIn": 1,
|
|
||||||
"datasource": {
|
|
||||||
"type": "datasource",
|
|
||||||
"uid": "grafana"
|
|
||||||
},
|
|
||||||
"enable": true,
|
|
||||||
"hide": true,
|
|
||||||
"iconColor": "rgba(0, 211, 255, 1)",
|
|
||||||
"name": "Annotations & Alerts",
|
|
||||||
"target": {
|
|
||||||
"limit": 100,
|
|
||||||
"matchAny": false,
|
|
||||||
"tags": [],
|
|
||||||
"type": "dashboard"
|
|
||||||
},
|
|
||||||
"type": "dashboard"
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"editable": true,
|
|
||||||
"fiscalYearStartMonth": 0,
|
|
||||||
"graphTooltip": 2,
|
|
||||||
"id": null,
|
|
||||||
"links": [],
|
|
||||||
"liveNow": false,
|
|
||||||
"panels": [
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"description": "",
|
|
||||||
"fieldConfig": {
|
|
||||||
"defaults": {
|
|
||||||
"color": {
|
|
||||||
"mode": "thresholds"
|
|
||||||
},
|
|
||||||
"custom": {
|
|
||||||
"align": "auto",
|
|
||||||
"displayMode": "auto",
|
|
||||||
"inspect": false
|
|
||||||
},
|
|
||||||
"mappings": [],
|
|
||||||
"thresholds": {
|
|
||||||
"mode": "absolute",
|
|
||||||
"steps": [
|
|
||||||
{
|
|
||||||
"color": "green",
|
|
||||||
"value": null
|
|
||||||
}
|
|
||||||
]
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"overrides": [
|
|
||||||
{
|
|
||||||
"matcher": {
|
|
||||||
"id": "byRegexp",
|
|
||||||
"options": ".*Time"
|
|
||||||
},
|
|
||||||
"properties": [
|
|
||||||
{
|
|
||||||
"id": "unit",
|
|
||||||
"value": "s"
|
|
||||||
}
|
|
||||||
]
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"gridPos": {
|
|
||||||
"h": 6,
|
|
||||||
"w": 24,
|
|
||||||
"x": 0,
|
|
||||||
"y": 0
|
|
||||||
},
|
|
||||||
"id": 206,
|
|
||||||
"options": {
|
|
||||||
"footer": {
|
|
||||||
"fields": "",
|
|
||||||
"reducer": [
|
|
||||||
"sum"
|
|
||||||
],
|
|
||||||
"show": false
|
|
||||||
},
|
|
||||||
"showHeader": true
|
|
||||||
},
|
|
||||||
"pluginVersion": "9.1.8",
|
|
||||||
"targets": [
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"editorMode": "code",
|
|
||||||
"exemplar": false,
|
|
||||||
"expr": "f2b_config_jail_max_retries{instance=~\"$instance\"}",
|
|
||||||
"format": "table",
|
|
||||||
"instant": true,
|
|
||||||
"interval": "",
|
|
||||||
"legendFormat": "{{jail}}",
|
|
||||||
"refId": "A"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"editorMode": "code",
|
|
||||||
"exemplar": false,
|
|
||||||
"expr": "f2b_config_jail_ban_time{instance=~\"$instance\"}",
|
|
||||||
"format": "table",
|
|
||||||
"hide": false,
|
|
||||||
"instant": true,
|
|
||||||
"interval": "",
|
|
||||||
"legendFormat": "{{jail}}",
|
|
||||||
"refId": "B"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"editorMode": "code",
|
|
||||||
"exemplar": false,
|
|
||||||
"expr": "f2b_config_jail_find_time{instance=~\"$instance\"}",
|
|
||||||
"format": "table",
|
|
||||||
"hide": false,
|
|
||||||
"instant": true,
|
|
||||||
"interval": "",
|
|
||||||
"legendFormat": "{{jail}}",
|
|
||||||
"refId": "C"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"title": "F2B Config",
|
|
||||||
"transformations": [
|
|
||||||
{
|
|
||||||
"id": "merge",
|
|
||||||
"options": {}
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"id": "groupBy",
|
|
||||||
"options": {
|
|
||||||
"fields": {
|
|
||||||
"Value #A": {
|
|
||||||
"aggregations": [
|
|
||||||
"lastNotNull"
|
|
||||||
],
|
|
||||||
"operation": "aggregate"
|
|
||||||
},
|
|
||||||
"Value #B": {
|
|
||||||
"aggregations": [
|
|
||||||
"lastNotNull"
|
|
||||||
],
|
|
||||||
"operation": "aggregate"
|
|
||||||
},
|
|
||||||
"Value #C": {
|
|
||||||
"aggregations": [
|
|
||||||
"lastNotNull"
|
|
||||||
],
|
|
||||||
"operation": "aggregate"
|
|
||||||
},
|
|
||||||
"instance": {
|
|
||||||
"aggregations": [],
|
|
||||||
"operation": "groupby"
|
|
||||||
},
|
|
||||||
"jail": {
|
|
||||||
"aggregations": [],
|
|
||||||
"operation": "groupby"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"id": "organize",
|
|
||||||
"options": {
|
|
||||||
"excludeByName": {},
|
|
||||||
"indexByName": {},
|
|
||||||
"renameByName": {
|
|
||||||
"Value #A (lastNotNull)": "Max Retries",
|
|
||||||
"Value #B (lastNotNull)": "Ban Time",
|
|
||||||
"Value #C (lastNotNull)": "Find Time",
|
|
||||||
"jail": "Jail"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"transparent": true,
|
|
||||||
"type": "table"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"description": "",
|
|
||||||
"fieldConfig": {
|
|
||||||
"defaults": {
|
|
||||||
"color": {
|
|
||||||
"mode": "palette-classic"
|
|
||||||
},
|
|
||||||
"custom": {
|
|
||||||
"axisCenteredZero": false,
|
|
||||||
"axisColorMode": "text",
|
|
||||||
"axisLabel": "",
|
|
||||||
"axisPlacement": "auto",
|
|
||||||
"barAlignment": 0,
|
|
||||||
"drawStyle": "line",
|
|
||||||
"fillOpacity": 10,
|
|
||||||
"gradientMode": "none",
|
|
||||||
"hideFrom": {
|
|
||||||
"legend": false,
|
|
||||||
"tooltip": false,
|
|
||||||
"viz": false
|
|
||||||
},
|
|
||||||
"lineInterpolation": "linear",
|
|
||||||
"lineWidth": 1,
|
|
||||||
"pointSize": 5,
|
|
||||||
"scaleDistribution": {
|
|
||||||
"type": "linear"
|
|
||||||
},
|
|
||||||
"showPoints": "never",
|
|
||||||
"spanNulls": true,
|
|
||||||
"stacking": {
|
|
||||||
"group": "A",
|
|
||||||
"mode": "none"
|
|
||||||
},
|
|
||||||
"thresholdsStyle": {
|
|
||||||
"mode": "off"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"mappings": [],
|
|
||||||
"min": 0,
|
|
||||||
"thresholds": {
|
|
||||||
"mode": "absolute",
|
|
||||||
"steps": [
|
|
||||||
{
|
|
||||||
"color": "green",
|
|
||||||
"value": null
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"unit": "short"
|
|
||||||
},
|
|
||||||
"overrides": []
|
|
||||||
},
|
|
||||||
"gridPos": {
|
|
||||||
"h": 8,
|
|
||||||
"w": 12,
|
|
||||||
"x": 0,
|
|
||||||
"y": 6
|
|
||||||
},
|
|
||||||
"id": 190,
|
|
||||||
"options": {
|
|
||||||
"legend": {
|
|
||||||
"calcs": [
|
|
||||||
"lastNotNull"
|
|
||||||
],
|
|
||||||
"displayMode": "table",
|
|
||||||
"placement": "right",
|
|
||||||
"showLegend": true
|
|
||||||
},
|
|
||||||
"tooltip": {
|
|
||||||
"mode": "single",
|
|
||||||
"sort": "none"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"pluginVersion": "8.2.1",
|
|
||||||
"targets": [
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"editorMode": "code",
|
|
||||||
"exemplar": true,
|
|
||||||
"expr": "f2b_jail_failed_total{instance=~\"$instance\"}",
|
|
||||||
"hide": false,
|
|
||||||
"interval": "",
|
|
||||||
"legendFormat": "{{jail}} ({{instance}})",
|
|
||||||
"range": true,
|
|
||||||
"refId": "A"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"title": "Fail2Ban Failures (Total)",
|
|
||||||
"transparent": true,
|
|
||||||
"type": "timeseries"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"description": "",
|
|
||||||
"fieldConfig": {
|
|
||||||
"defaults": {
|
|
||||||
"color": {
|
|
||||||
"mode": "palette-classic"
|
|
||||||
},
|
|
||||||
"custom": {
|
|
||||||
"axisCenteredZero": false,
|
|
||||||
"axisColorMode": "text",
|
|
||||||
"axisLabel": "",
|
|
||||||
"axisPlacement": "auto",
|
|
||||||
"barAlignment": 0,
|
|
||||||
"drawStyle": "line",
|
|
||||||
"fillOpacity": 10,
|
|
||||||
"gradientMode": "none",
|
|
||||||
"hideFrom": {
|
|
||||||
"legend": false,
|
|
||||||
"tooltip": false,
|
|
||||||
"viz": false
|
|
||||||
},
|
|
||||||
"lineInterpolation": "linear",
|
|
||||||
"lineWidth": 1,
|
|
||||||
"pointSize": 5,
|
|
||||||
"scaleDistribution": {
|
|
||||||
"type": "linear"
|
|
||||||
},
|
|
||||||
"showPoints": "never",
|
|
||||||
"spanNulls": true,
|
|
||||||
"stacking": {
|
|
||||||
"group": "A",
|
|
||||||
"mode": "none"
|
|
||||||
},
|
|
||||||
"thresholdsStyle": {
|
|
||||||
"mode": "off"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"mappings": [],
|
|
||||||
"min": 0,
|
|
||||||
"thresholds": {
|
|
||||||
"mode": "absolute",
|
|
||||||
"steps": [
|
|
||||||
{
|
|
||||||
"color": "green",
|
|
||||||
"value": null
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"unit": "short"
|
|
||||||
},
|
|
||||||
"overrides": []
|
|
||||||
},
|
|
||||||
"gridPos": {
|
|
||||||
"h": 8,
|
|
||||||
"w": 12,
|
|
||||||
"x": 12,
|
|
||||||
"y": 6
|
|
||||||
},
|
|
||||||
"id": 191,
|
|
||||||
"options": {
|
|
||||||
"legend": {
|
|
||||||
"calcs": [
|
|
||||||
"lastNotNull"
|
|
||||||
],
|
|
||||||
"displayMode": "table",
|
|
||||||
"placement": "right",
|
|
||||||
"showLegend": true
|
|
||||||
},
|
|
||||||
"tooltip": {
|
|
||||||
"mode": "single",
|
|
||||||
"sort": "none"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"pluginVersion": "8.2.1",
|
|
||||||
"targets": [
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"editorMode": "code",
|
|
||||||
"exemplar": true,
|
|
||||||
"expr": "f2b_jail_banned_total{instance=~\"$instance\"}",
|
|
||||||
"interval": "",
|
|
||||||
"legendFormat": "{{jail}} ({{instance}})",
|
|
||||||
"range": true,
|
|
||||||
"refId": "A"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"title": "Fail2Ban Bans (Total)",
|
|
||||||
"transparent": true,
|
|
||||||
"type": "timeseries"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"description": "",
|
|
||||||
"fieldConfig": {
|
|
||||||
"defaults": {
|
|
||||||
"color": {
|
|
||||||
"mode": "palette-classic"
|
|
||||||
},
|
|
||||||
"custom": {
|
|
||||||
"axisCenteredZero": false,
|
|
||||||
"axisColorMode": "text",
|
|
||||||
"axisLabel": "",
|
|
||||||
"axisPlacement": "auto",
|
|
||||||
"barAlignment": 0,
|
|
||||||
"drawStyle": "line",
|
|
||||||
"fillOpacity": 10,
|
|
||||||
"gradientMode": "none",
|
|
||||||
"hideFrom": {
|
|
||||||
"legend": false,
|
|
||||||
"tooltip": false,
|
|
||||||
"viz": false
|
|
||||||
},
|
|
||||||
"lineInterpolation": "linear",
|
|
||||||
"lineWidth": 1,
|
|
||||||
"pointSize": 5,
|
|
||||||
"scaleDistribution": {
|
|
||||||
"type": "linear"
|
|
||||||
},
|
|
||||||
"showPoints": "never",
|
|
||||||
"spanNulls": true,
|
|
||||||
"stacking": {
|
|
||||||
"group": "A",
|
|
||||||
"mode": "none"
|
|
||||||
},
|
|
||||||
"thresholdsStyle": {
|
|
||||||
"mode": "off"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"mappings": [],
|
|
||||||
"min": 0,
|
|
||||||
"thresholds": {
|
|
||||||
"mode": "absolute",
|
|
||||||
"steps": [
|
|
||||||
{
|
|
||||||
"color": "green",
|
|
||||||
"value": null
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"unit": "short"
|
|
||||||
},
|
|
||||||
"overrides": []
|
|
||||||
},
|
|
||||||
"gridPos": {
|
|
||||||
"h": 8,
|
|
||||||
"w": 12,
|
|
||||||
"x": 0,
|
|
||||||
"y": 14
|
|
||||||
},
|
|
||||||
"id": 208,
|
|
||||||
"options": {
|
|
||||||
"legend": {
|
|
||||||
"calcs": [
|
|
||||||
"lastNotNull"
|
|
||||||
],
|
|
||||||
"displayMode": "table",
|
|
||||||
"placement": "right",
|
|
||||||
"showLegend": true
|
|
||||||
},
|
|
||||||
"tooltip": {
|
|
||||||
"mode": "single",
|
|
||||||
"sort": "none"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"pluginVersion": "8.2.1",
|
|
||||||
"targets": [
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"editorMode": "code",
|
|
||||||
"exemplar": true,
|
|
||||||
"expr": "f2b_jail_failed_current{instance=~\"$instance\"}",
|
|
||||||
"interval": "",
|
|
||||||
"legendFormat": "{{jail}} ({{instance}})",
|
|
||||||
"range": true,
|
|
||||||
"refId": "A"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"title": "Fail2Ban Failures (Current)",
|
|
||||||
"transparent": true,
|
|
||||||
"type": "timeseries"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"description": "",
|
|
||||||
"fieldConfig": {
|
|
||||||
"defaults": {
|
|
||||||
"color": {
|
|
||||||
"mode": "palette-classic"
|
|
||||||
},
|
|
||||||
"custom": {
|
|
||||||
"axisCenteredZero": false,
|
|
||||||
"axisColorMode": "text",
|
|
||||||
"axisLabel": "",
|
|
||||||
"axisPlacement": "auto",
|
|
||||||
"barAlignment": 0,
|
|
||||||
"drawStyle": "line",
|
|
||||||
"fillOpacity": 10,
|
|
||||||
"gradientMode": "none",
|
|
||||||
"hideFrom": {
|
|
||||||
"legend": false,
|
|
||||||
"tooltip": false,
|
|
||||||
"viz": false
|
|
||||||
},
|
|
||||||
"lineInterpolation": "linear",
|
|
||||||
"lineWidth": 1,
|
|
||||||
"pointSize": 5,
|
|
||||||
"scaleDistribution": {
|
|
||||||
"type": "linear"
|
|
||||||
},
|
|
||||||
"showPoints": "never",
|
|
||||||
"spanNulls": true,
|
|
||||||
"stacking": {
|
|
||||||
"group": "A",
|
|
||||||
"mode": "none"
|
|
||||||
},
|
|
||||||
"thresholdsStyle": {
|
|
||||||
"mode": "off"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"mappings": [],
|
|
||||||
"min": 0,
|
|
||||||
"thresholds": {
|
|
||||||
"mode": "absolute",
|
|
||||||
"steps": [
|
|
||||||
{
|
|
||||||
"color": "green",
|
|
||||||
"value": null
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"unit": "short"
|
|
||||||
},
|
|
||||||
"overrides": []
|
|
||||||
},
|
|
||||||
"gridPos": {
|
|
||||||
"h": 8,
|
|
||||||
"w": 12,
|
|
||||||
"x": 12,
|
|
||||||
"y": 14
|
|
||||||
},
|
|
||||||
"id": 209,
|
|
||||||
"options": {
|
|
||||||
"legend": {
|
|
||||||
"calcs": [
|
|
||||||
"lastNotNull"
|
|
||||||
],
|
|
||||||
"displayMode": "table",
|
|
||||||
"placement": "right",
|
|
||||||
"showLegend": true
|
|
||||||
},
|
|
||||||
"tooltip": {
|
|
||||||
"mode": "single",
|
|
||||||
"sort": "none"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"pluginVersion": "8.2.1",
|
|
||||||
"targets": [
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"editorMode": "code",
|
|
||||||
"exemplar": true,
|
|
||||||
"expr": "f2b_jail_banned_current{instance=~\"$instance\"}",
|
|
||||||
"interval": "",
|
|
||||||
"legendFormat": "{{jail}} ({{instance}})",
|
|
||||||
"range": true,
|
|
||||||
"refId": "A"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"title": "Fail2Ban Bans (Current)",
|
|
||||||
"transparent": true,
|
|
||||||
"type": "timeseries"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"description": "",
|
|
||||||
"fieldConfig": {
|
|
||||||
"defaults": {
|
|
||||||
"color": {
|
|
||||||
"mode": "palette-classic"
|
|
||||||
},
|
|
||||||
"custom": {
|
|
||||||
"axisCenteredZero": false,
|
|
||||||
"axisColorMode": "text",
|
|
||||||
"axisLabel": "",
|
|
||||||
"axisPlacement": "auto",
|
|
||||||
"barAlignment": 0,
|
|
||||||
"drawStyle": "line",
|
|
||||||
"fillOpacity": 10,
|
|
||||||
"gradientMode": "none",
|
|
||||||
"hideFrom": {
|
|
||||||
"legend": false,
|
|
||||||
"tooltip": false,
|
|
||||||
"viz": false
|
|
||||||
},
|
|
||||||
"lineInterpolation": "linear",
|
|
||||||
"lineWidth": 1,
|
|
||||||
"pointSize": 5,
|
|
||||||
"scaleDistribution": {
|
|
||||||
"type": "linear"
|
|
||||||
},
|
|
||||||
"showPoints": "never",
|
|
||||||
"spanNulls": true,
|
|
||||||
"stacking": {
|
|
||||||
"group": "A",
|
|
||||||
"mode": "none"
|
|
||||||
},
|
|
||||||
"thresholdsStyle": {
|
|
||||||
"mode": "off"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"mappings": [],
|
|
||||||
"max": 1,
|
|
||||||
"min": 0,
|
|
||||||
"thresholds": {
|
|
||||||
"mode": "absolute",
|
|
||||||
"steps": [
|
|
||||||
{
|
|
||||||
"color": "green",
|
|
||||||
"value": null
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"unit": "short"
|
|
||||||
},
|
|
||||||
"overrides": []
|
|
||||||
},
|
|
||||||
"gridPos": {
|
|
||||||
"h": 5,
|
|
||||||
"w": 12,
|
|
||||||
"x": 0,
|
|
||||||
"y": 22
|
|
||||||
},
|
|
||||||
"id": 203,
|
|
||||||
"options": {
|
|
||||||
"legend": {
|
|
||||||
"calcs": [
|
|
||||||
"lastNotNull"
|
|
||||||
],
|
|
||||||
"displayMode": "table",
|
|
||||||
"placement": "right",
|
|
||||||
"showLegend": true
|
|
||||||
},
|
|
||||||
"tooltip": {
|
|
||||||
"mode": "single",
|
|
||||||
"sort": "none"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"pluginVersion": "8.2.1",
|
|
||||||
"targets": [
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"editorMode": "code",
|
|
||||||
"exemplar": true,
|
|
||||||
"expr": "f2b_up{instance=~\"$instance\"}",
|
|
||||||
"interval": "",
|
|
||||||
"legendFormat": "Up ({{instance}})",
|
|
||||||
"range": true,
|
|
||||||
"refId": "A"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"title": "Fail2Ban Up",
|
|
||||||
"transparent": true,
|
|
||||||
"type": "timeseries"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"description": "",
|
|
||||||
"fieldConfig": {
|
|
||||||
"defaults": {
|
|
||||||
"color": {
|
|
||||||
"mode": "palette-classic"
|
|
||||||
},
|
|
||||||
"custom": {
|
|
||||||
"axisCenteredZero": false,
|
|
||||||
"axisColorMode": "text",
|
|
||||||
"axisLabel": "",
|
|
||||||
"axisPlacement": "auto",
|
|
||||||
"barAlignment": 0,
|
|
||||||
"drawStyle": "line",
|
|
||||||
"fillOpacity": 10,
|
|
||||||
"gradientMode": "none",
|
|
||||||
"hideFrom": {
|
|
||||||
"legend": false,
|
|
||||||
"tooltip": false,
|
|
||||||
"viz": false
|
|
||||||
},
|
|
||||||
"lineInterpolation": "linear",
|
|
||||||
"lineWidth": 1,
|
|
||||||
"pointSize": 5,
|
|
||||||
"scaleDistribution": {
|
|
||||||
"type": "linear"
|
|
||||||
},
|
|
||||||
"showPoints": "never",
|
|
||||||
"spanNulls": true,
|
|
||||||
"stacking": {
|
|
||||||
"group": "A",
|
|
||||||
"mode": "none"
|
|
||||||
},
|
|
||||||
"thresholdsStyle": {
|
|
||||||
"mode": "off"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"mappings": [],
|
|
||||||
"max": 1,
|
|
||||||
"min": 0,
|
|
||||||
"thresholds": {
|
|
||||||
"mode": "absolute",
|
|
||||||
"steps": [
|
|
||||||
{
|
|
||||||
"color": "green",
|
|
||||||
"value": null
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"unit": "short"
|
|
||||||
},
|
|
||||||
"overrides": []
|
|
||||||
},
|
|
||||||
"gridPos": {
|
|
||||||
"h": 5,
|
|
||||||
"w": 12,
|
|
||||||
"x": 12,
|
|
||||||
"y": 22
|
|
||||||
},
|
|
||||||
"id": 204,
|
|
||||||
"options": {
|
|
||||||
"legend": {
|
|
||||||
"calcs": [
|
|
||||||
"lastNotNull"
|
|
||||||
],
|
|
||||||
"displayMode": "table",
|
|
||||||
"placement": "right",
|
|
||||||
"showLegend": true
|
|
||||||
},
|
|
||||||
"tooltip": {
|
|
||||||
"mode": "single",
|
|
||||||
"sort": "none"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"pluginVersion": "8.2.1",
|
|
||||||
"targets": [
|
|
||||||
{
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"editorMode": "code",
|
|
||||||
"exemplar": true,
|
|
||||||
"expr": "f2b_errors{instance=~\"$instance\"}",
|
|
||||||
"interval": "",
|
|
||||||
"legendFormat": "{{type}} ({{instance}})",
|
|
||||||
"range": true,
|
|
||||||
"refId": "A"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"title": "Fail2Ban Exporter Errors",
|
|
||||||
"transparent": true,
|
|
||||||
"type": "timeseries"
|
|
||||||
}
|
|
||||||
],
|
|
||||||
"refresh": "30s",
|
|
||||||
"schemaVersion": 37,
|
|
||||||
"style": "dark",
|
|
||||||
"tags": [],
|
|
||||||
"templating": {
|
|
||||||
"list": [
|
|
||||||
{
|
|
||||||
"current": {
|
|
||||||
"selected": false,
|
|
||||||
"text": "Prometheus",
|
|
||||||
"value": "Prometheus"
|
|
||||||
},
|
|
||||||
"hide": 0,
|
|
||||||
"includeAll": false,
|
|
||||||
"label": "Data Source",
|
|
||||||
"multi": false,
|
|
||||||
"name": "DataSource",
|
|
||||||
"options": [],
|
|
||||||
"query": "prometheus",
|
|
||||||
"queryValue": "",
|
|
||||||
"refresh": 1,
|
|
||||||
"regex": "",
|
|
||||||
"skipUrlSync": false,
|
|
||||||
"type": "datasource"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"current": {},
|
|
||||||
"datasource": {
|
|
||||||
"type": "prometheus",
|
|
||||||
"uid": "prometheus"
|
|
||||||
},
|
|
||||||
"definition": "f2b_up",
|
|
||||||
"description": "Select which instance(s) to show",
|
|
||||||
"hide": 0,
|
|
||||||
"includeAll": false,
|
|
||||||
"label": "Instance",
|
|
||||||
"multi": true,
|
|
||||||
"name": "instance",
|
|
||||||
"options": [],
|
|
||||||
"query": {
|
|
||||||
"query": "f2b_up",
|
|
||||||
"refId": "StandardVariableQuery"
|
|
||||||
},
|
|
||||||
"refresh": 1,
|
|
||||||
"regex": "/.*instance=\"([^\"]+)\"/",
|
|
||||||
"skipUrlSync": false,
|
|
||||||
"sort": 0,
|
|
||||||
"type": "query"
|
|
||||||
}
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"time": {
|
|
||||||
"from": "now-6h",
|
|
||||||
"to": "now"
|
|
||||||
},
|
|
||||||
"timepicker": {},
|
|
||||||
"timezone": "",
|
|
||||||
"title": "F2B",
|
|
||||||
"uid": "cTkH9AT7z",
|
|
||||||
"version": 3,
|
|
||||||
"weekStart": ""
|
|
||||||
}
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
# Systemd
|
|
||||||
|
|
||||||
The `.service` file in this directory should be copied to the `/etc/systemd/system/` folder.
|
|
||||||
|
|
||||||
- It expects the binary file to be installed at `/usr/sbin/fail2ban_exporter`.
|
|
||||||
- It expects a user named `fail2ban_exporter` to exist. This user should not have a shell or any special privileges
|
|
||||||
aside from read-access to the fail2ban socket file.
|
|
||||||
|
|
||||||
The `ExecStart` line can be modified to add any custom CLI flags.
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
[Unit]
|
|
||||||
Description=Fail2Ban Exporter
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
User=fail2ban_exporter
|
|
||||||
ExecStart=/usr/sbin/fail2ban_exporter
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
package auth
|
|
||||||
|
|
||||||
import (
|
|
||||||
"fmt"
|
|
||||||
"net/http"
|
|
||||||
)
|
|
||||||
|
|
||||||
func NewBasicAuthProvider(username, password string) AuthProvider {
|
|
||||||
return &basicAuthProvider{
|
|
||||||
hashedAuth: encodeBasicAuth(username, password),
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
type basicAuthProvider struct {
|
|
||||||
hashedAuth string
|
|
||||||
}
|
|
||||||
|
|
||||||
func (p *basicAuthProvider) IsAllowed(request *http.Request) bool {
|
|
||||||
username, password, ok := request.BasicAuth()
|
|
||||||
if !ok {
|
|
||||||
return false
|
|
||||||
}
|
|
||||||
requestAuth := encodeBasicAuth(username, password)
|
|
||||||
return p.hashedAuth == requestAuth
|
|
||||||
}
|
|
||||||
|
|
||||||
func encodeBasicAuth(username, password string) string {
|
|
||||||
return HashString(fmt.Sprintf("%s:%s", username, password))
|
|
||||||
}
|
|
||||||
@@ -1,53 +0,0 @@
|
|||||||
package auth
|
|
||||||
|
|
||||||
import (
|
|
||||||
"net/http"
|
|
||||||
"net/http/httptest"
|
|
||||||
"testing"
|
|
||||||
)
|
|
||||||
|
|
||||||
func Test_GIVEN_BasicAuthSet_WHEN_CallingIsAllowedWithCorrectCreds_THEN_TrueReturned(t *testing.T) {
|
|
||||||
// assemble
|
|
||||||
username := "u1"
|
|
||||||
password := HashString("abc")
|
|
||||||
request := httptest.NewRequest(http.MethodGet, "http://example.com", nil)
|
|
||||||
request.SetBasicAuth(username, password)
|
|
||||||
provider := NewBasicAuthProvider(username, password)
|
|
||||||
|
|
||||||
// act
|
|
||||||
result := provider.IsAllowed(request)
|
|
||||||
|
|
||||||
// assert
|
|
||||||
if !result {
|
|
||||||
t.Errorf("expected request to be allowed, but failed")
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func Test_GIVEN_BasicAuthSet_WHEN_CallingIsAllowedWithoutCreds_THEN_FalseReturned(t *testing.T) {
|
|
||||||
// assemble
|
|
||||||
request := httptest.NewRequest(http.MethodGet, "http://example.com", nil)
|
|
||||||
provider := NewBasicAuthProvider("u1", "p1")
|
|
||||||
|
|
||||||
// act
|
|
||||||
result := provider.IsAllowed(request)
|
|
||||||
|
|
||||||
// assert
|
|
||||||
if result {
|
|
||||||
t.Errorf("expected request to be denied, but was allowed")
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func Test_GIVEN_BasicAuthSet_WHEN_CallingIsAllowedWithWrongCreds_THEN_FalseReturned(t *testing.T) {
|
|
||||||
// assemble
|
|
||||||
request := httptest.NewRequest(http.MethodGet, "http://example.com", nil)
|
|
||||||
request.SetBasicAuth("wrong", "pw")
|
|
||||||
provider := NewBasicAuthProvider("u1", "p1")
|
|
||||||
|
|
||||||
// act
|
|
||||||
result := provider.IsAllowed(request)
|
|
||||||
|
|
||||||
// assert
|
|
||||||
if result {
|
|
||||||
t.Errorf("expected request to be denied, but was allowed")
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,14 +0,0 @@
|
|||||||
package auth
|
|
||||||
|
|
||||||
import "net/http"
|
|
||||||
|
|
||||||
func NewEmptyAuthProvider() AuthProvider {
|
|
||||||
return &emptyAuthProvider{}
|
|
||||||
}
|
|
||||||
|
|
||||||
type emptyAuthProvider struct {
|
|
||||||
}
|
|
||||||
|
|
||||||
func (p *emptyAuthProvider) IsAllowed(request *http.Request) bool {
|
|
||||||
return true
|
|
||||||
}
|
|
||||||
@@ -1,36 +0,0 @@
|
|||||||
package auth
|
|
||||||
|
|
||||||
import (
|
|
||||||
"net/http"
|
|
||||||
"net/http/httptest"
|
|
||||||
"testing"
|
|
||||||
)
|
|
||||||
|
|
||||||
func Test_GIVEN_EmptyAuth_WHEN_CallingIsAllowedWithoutAuth_THEN_TrueReturned(t *testing.T) {
|
|
||||||
// assemble
|
|
||||||
request := httptest.NewRequest(http.MethodGet, "http://example.com", nil)
|
|
||||||
provider := NewEmptyAuthProvider()
|
|
||||||
|
|
||||||
// act
|
|
||||||
response := provider.IsAllowed(request)
|
|
||||||
|
|
||||||
// assert
|
|
||||||
if !response {
|
|
||||||
t.Errorf("expected request to be allowed, but failed")
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func Test_GIVEN_EmptyAuth_WHEN_CallingIsAllowedWithAuth_THEN_TrueReturned(t *testing.T) {
|
|
||||||
// assemble
|
|
||||||
request := httptest.NewRequest(http.MethodGet, "http://example.com", nil)
|
|
||||||
request.SetBasicAuth("user", "pass")
|
|
||||||
provider := NewEmptyAuthProvider()
|
|
||||||
|
|
||||||
// act
|
|
||||||
response := provider.IsAllowed(request)
|
|
||||||
|
|
||||||
// assert
|
|
||||||
if !response {
|
|
||||||
t.Errorf("expected request to be allowed, but failed")
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,18 +0,0 @@
|
|||||||
package auth
|
|
||||||
|
|
||||||
import (
|
|
||||||
"crypto/sha256"
|
|
||||||
"encoding/hex"
|
|
||||||
)
|
|
||||||
|
|
||||||
func hash(data []byte) []byte {
|
|
||||||
if len(data) == 0 {
|
|
||||||
return []byte{}
|
|
||||||
}
|
|
||||||
b := sha256.Sum256(data)
|
|
||||||
return b[:]
|
|
||||||
}
|
|
||||||
|
|
||||||
func HashString(data string) string {
|
|
||||||
return hex.EncodeToString(hash([]byte(data)))
|
|
||||||
}
|
|
||||||
@@ -1,26 +0,0 @@
|
|||||||
package auth
|
|
||||||
|
|
||||||
import (
|
|
||||||
"reflect"
|
|
||||||
"testing"
|
|
||||||
)
|
|
||||||
|
|
||||||
func TestHashString(t *testing.T) {
|
|
||||||
tests := []struct {
|
|
||||||
name string
|
|
||||||
args string
|
|
||||||
want string
|
|
||||||
}{
|
|
||||||
{"Happy path #1", "123", "a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3"},
|
|
||||||
{"Happy path #2", "hello world", "b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9"},
|
|
||||||
{"Happy path #3", "H3Ll0_W0RLD", "d58a27fe9a6e73a1d8a67189fb8acace047e7a1a795276a0056d3717ad61bd0e"},
|
|
||||||
{"Blank string", "", ""},
|
|
||||||
}
|
|
||||||
for _, tt := range tests {
|
|
||||||
t.Run(tt.name, func(t *testing.T) {
|
|
||||||
if got := HashString(tt.args); !reflect.DeepEqual(got, tt.want) {
|
|
||||||
t.Errorf("HashString() = %v, want %v", got, tt.want)
|
|
||||||
}
|
|
||||||
})
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
package auth
|
|
||||||
|
|
||||||
import (
|
|
||||||
"net/http"
|
|
||||||
)
|
|
||||||
|
|
||||||
type AuthProvider interface {
|
|
||||||
IsAllowed(*http.Request) bool
|
|
||||||
}
|
|
||||||
-84
@@ -1,84 +0,0 @@
|
|||||||
package cfg
|
|
||||||
|
|
||||||
import (
|
|
||||||
"fmt"
|
|
||||||
"log"
|
|
||||||
"os"
|
|
||||||
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/auth"
|
|
||||||
"github.com/alecthomas/kong"
|
|
||||||
)
|
|
||||||
|
|
||||||
var cliStruct struct {
|
|
||||||
VersionMode bool `name:"version" short:"v" help:"Show version info and exit"`
|
|
||||||
DryRunMode bool `name:"dry-run" help:"Attempt to connect to the fail2ban socket then exit before starting the server"`
|
|
||||||
ServerAddress string `name:"web.listen-address" env:"F2B_WEB_LISTEN_ADDRESS" help:"Address to use for the metrics server" default:"${default_address}"`
|
|
||||||
F2bSocketPath string `name:"collector.f2b.socket" env:"F2B_COLLECTOR_SOCKET" help:"Path to the fail2ban server socket" default:"${default_socket}"`
|
|
||||||
ExitOnSocketError bool `name:"collector.f2b.exit-on-socket-connection-error" env:"F2B_EXIT_ON_SOCKET_CONN_ERROR" help:"When set to true the exporter will immediately exit on a fail2ban socket connection error"`
|
|
||||||
TextFileExporterPath string `name:"collector.textfile.directory" env:"F2B_COLLECTOR_TEXT_PATH" help:"Directory to read text files with metrics from"`
|
|
||||||
BasicAuthUser string `name:"web.basic-auth.username" env:"F2B_WEB_BASICAUTH_USER" help:"Username to use to protect endpoints with basic auth"`
|
|
||||||
BasicAuthPass string `name:"web.basic-auth.password" env:"F2B_WEB_BASICAUTH_PASS" help:"Password to use to protect endpoints with basic auth"`
|
|
||||||
}
|
|
||||||
|
|
||||||
func Parse() *AppSettings {
|
|
||||||
ctx := kong.Parse(
|
|
||||||
&cliStruct,
|
|
||||||
kong.Vars{
|
|
||||||
"default_socket": "/var/run/fail2ban/fail2ban.sock",
|
|
||||||
"default_address": ":9191",
|
|
||||||
},
|
|
||||||
kong.Name("fail2ban_exporter"),
|
|
||||||
kong.Description("🚀 Export prometheus metrics from a running Fail2Ban instance"),
|
|
||||||
kong.UsageOnError(),
|
|
||||||
)
|
|
||||||
|
|
||||||
validateFlags(ctx)
|
|
||||||
settings := &AppSettings{
|
|
||||||
VersionMode: cliStruct.VersionMode,
|
|
||||||
DryRunMode: cliStruct.DryRunMode,
|
|
||||||
MetricsAddress: cliStruct.ServerAddress,
|
|
||||||
Fail2BanSocketPath: cliStruct.F2bSocketPath,
|
|
||||||
FileCollectorPath: cliStruct.TextFileExporterPath,
|
|
||||||
ExitOnSocketConnError: cliStruct.ExitOnSocketError,
|
|
||||||
AuthProvider: createAuthProvider(),
|
|
||||||
}
|
|
||||||
return settings
|
|
||||||
}
|
|
||||||
|
|
||||||
func createAuthProvider() auth.AuthProvider {
|
|
||||||
username := cliStruct.BasicAuthUser
|
|
||||||
password := cliStruct.BasicAuthPass
|
|
||||||
|
|
||||||
if len(username) == 0 && len(password) == 0 {
|
|
||||||
return auth.NewEmptyAuthProvider()
|
|
||||||
}
|
|
||||||
log.Print("basic auth enabled")
|
|
||||||
return auth.NewBasicAuthProvider(username, password)
|
|
||||||
}
|
|
||||||
|
|
||||||
func validateFlags(cliCtx *kong.Context) {
|
|
||||||
var flagsValid = true
|
|
||||||
var messages = []string{}
|
|
||||||
if !cliStruct.VersionMode {
|
|
||||||
if cliStruct.F2bSocketPath == "" {
|
|
||||||
messages = append(messages, "error: fail2ban socket path must not be blank")
|
|
||||||
flagsValid = false
|
|
||||||
}
|
|
||||||
if cliStruct.ServerAddress == "" {
|
|
||||||
messages = append(messages, "error: invalid server address, must not be blank")
|
|
||||||
flagsValid = false
|
|
||||||
}
|
|
||||||
if (len(cliStruct.BasicAuthUser) > 0) != (len(cliStruct.BasicAuthPass) > 0) {
|
|
||||||
messages = append(messages, "error: to enable basic auth both the username and the password must be provided")
|
|
||||||
flagsValid = false
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if !flagsValid {
|
|
||||||
_ = cliCtx.PrintUsage(false)
|
|
||||||
fmt.Println()
|
|
||||||
for i := 0; i < len(messages); i++ {
|
|
||||||
fmt.Println(messages[i])
|
|
||||||
}
|
|
||||||
os.Exit(1)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,13 +0,0 @@
|
|||||||
package cfg
|
|
||||||
|
|
||||||
import "git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/auth"
|
|
||||||
|
|
||||||
type AppSettings struct {
|
|
||||||
VersionMode bool
|
|
||||||
DryRunMode bool
|
|
||||||
MetricsAddress string
|
|
||||||
Fail2BanSocketPath string
|
|
||||||
FileCollectorPath string
|
|
||||||
AuthProvider auth.AuthProvider
|
|
||||||
ExitOnSocketConnError bool
|
|
||||||
}
|
|
||||||
@@ -1,76 +0,0 @@
|
|||||||
package f2b
|
|
||||||
|
|
||||||
import (
|
|
||||||
"log"
|
|
||||||
"os"
|
|
||||||
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/cfg"
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/socket"
|
|
||||||
"github.com/prometheus/client_golang/prometheus"
|
|
||||||
)
|
|
||||||
|
|
||||||
type Collector struct {
|
|
||||||
socketPath string
|
|
||||||
exporterVersion string
|
|
||||||
lastError error
|
|
||||||
socketConnectionErrorCount int
|
|
||||||
socketRequestErrorCount int
|
|
||||||
exitOnSocketConnError bool
|
|
||||||
}
|
|
||||||
|
|
||||||
func NewExporter(appSettings *cfg.AppSettings, exporterVersion string) *Collector {
|
|
||||||
log.Printf("reading fail2ban metrics from socket file: %s", appSettings.Fail2BanSocketPath)
|
|
||||||
printFail2BanServerVersion(appSettings.Fail2BanSocketPath)
|
|
||||||
return &Collector{
|
|
||||||
socketPath: appSettings.Fail2BanSocketPath,
|
|
||||||
exporterVersion: exporterVersion,
|
|
||||||
lastError: nil,
|
|
||||||
socketConnectionErrorCount: 0,
|
|
||||||
socketRequestErrorCount: 0,
|
|
||||||
exitOnSocketConnError: appSettings.ExitOnSocketConnError,
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) Describe(ch chan<- *prometheus.Desc) {
|
|
||||||
ch <- metricServerUp
|
|
||||||
ch <- metricJailCount
|
|
||||||
ch <- metricJailFailedCurrent
|
|
||||||
ch <- metricJailFailedTotal
|
|
||||||
ch <- metricJailBannedCurrent
|
|
||||||
ch <- metricJailBannedTotal
|
|
||||||
ch <- metricErrorCount
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) Collect(ch chan<- prometheus.Metric) {
|
|
||||||
s, err := socket.ConnectToSocket(c.socketPath)
|
|
||||||
if err != nil {
|
|
||||||
log.Printf("error opening socket: %v", err)
|
|
||||||
c.socketConnectionErrorCount++
|
|
||||||
if c.exitOnSocketConnError {
|
|
||||||
os.Exit(1)
|
|
||||||
}
|
|
||||||
} else {
|
|
||||||
defer func() { _ = s.Close() }()
|
|
||||||
}
|
|
||||||
|
|
||||||
c.collectServerUpMetric(ch, s)
|
|
||||||
if err == nil && s != nil {
|
|
||||||
c.collectJailMetrics(ch, s)
|
|
||||||
c.collectVersionMetric(ch, s)
|
|
||||||
}
|
|
||||||
c.collectErrorCountMetric(ch)
|
|
||||||
}
|
|
||||||
|
|
||||||
func printFail2BanServerVersion(socketPath string) {
|
|
||||||
s, err := socket.ConnectToSocket(socketPath)
|
|
||||||
if err != nil {
|
|
||||||
log.Printf("error connecting to socket: %v", err)
|
|
||||||
} else {
|
|
||||||
version, err := s.GetServerVersion()
|
|
||||||
if err != nil {
|
|
||||||
log.Printf("error interacting with socket: %v", err)
|
|
||||||
} else {
|
|
||||||
log.Printf("successfully connected to fail2ban socket! fail2ban version: %s", version)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,180 +0,0 @@
|
|||||||
package f2b
|
|
||||||
|
|
||||||
import (
|
|
||||||
"log"
|
|
||||||
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/socket"
|
|
||||||
"github.com/prometheus/client_golang/prometheus"
|
|
||||||
)
|
|
||||||
|
|
||||||
const (
|
|
||||||
namespace = "f2b"
|
|
||||||
)
|
|
||||||
|
|
||||||
var (
|
|
||||||
metricErrorCount = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "", "errors"),
|
|
||||||
"Number of errors found since startup",
|
|
||||||
[]string{"type"}, nil,
|
|
||||||
)
|
|
||||||
metricServerUp = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "", "up"),
|
|
||||||
"Check if the fail2ban server is up",
|
|
||||||
nil, nil,
|
|
||||||
)
|
|
||||||
metricJailCount = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "", "jail_count"),
|
|
||||||
"Number of defined jails",
|
|
||||||
nil, nil,
|
|
||||||
)
|
|
||||||
metricJailFailedCurrent = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "", "jail_failed_current"),
|
|
||||||
"Number of current failures on this jail's filter",
|
|
||||||
[]string{"jail"}, nil,
|
|
||||||
)
|
|
||||||
metricJailFailedTotal = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "", "jail_failed_total"),
|
|
||||||
"Number of total failures on this jail's filter",
|
|
||||||
[]string{"jail"}, nil,
|
|
||||||
)
|
|
||||||
metricJailBannedCurrent = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "", "jail_banned_current"),
|
|
||||||
"Number of IPs currently banned in this jail",
|
|
||||||
[]string{"jail"}, nil,
|
|
||||||
)
|
|
||||||
metricJailBannedTotal = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "", "jail_banned_total"),
|
|
||||||
"Total number of IPs banned by this jail (includes expired bans)",
|
|
||||||
[]string{"jail"}, nil,
|
|
||||||
)
|
|
||||||
metricJailBanTime = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "config", "jail_ban_time"),
|
|
||||||
"How long an IP is banned for in this jail (in seconds)",
|
|
||||||
[]string{"jail"}, nil,
|
|
||||||
)
|
|
||||||
metricJailFindTime = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "config", "jail_find_time"),
|
|
||||||
"How far back will the filter look for failures in this jail (in seconds)",
|
|
||||||
[]string{"jail"}, nil,
|
|
||||||
)
|
|
||||||
metricJailMaxRetry = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "config", "jail_max_retries"),
|
|
||||||
"The number of failures allowed until the IP is banned by this jail",
|
|
||||||
[]string{"jail"}, nil,
|
|
||||||
)
|
|
||||||
metricVersionInfo = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "", "version"),
|
|
||||||
"Version of the exporter and fail2ban server",
|
|
||||||
[]string{"exporter", "fail2ban"}, nil,
|
|
||||||
)
|
|
||||||
)
|
|
||||||
|
|
||||||
func (c *Collector) collectErrorCountMetric(ch chan<- prometheus.Metric) {
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricErrorCount, prometheus.CounterValue, float64(c.socketConnectionErrorCount), "socket_conn",
|
|
||||||
)
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricErrorCount, prometheus.CounterValue, float64(c.socketRequestErrorCount), "socket_req",
|
|
||||||
)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) collectServerUpMetric(ch chan<- prometheus.Metric, s *socket.Fail2BanSocket) {
|
|
||||||
var serverUp float64 = 0
|
|
||||||
if s != nil {
|
|
||||||
pingSuccess, err := s.Ping()
|
|
||||||
if err != nil {
|
|
||||||
c.socketRequestErrorCount++
|
|
||||||
log.Print(err)
|
|
||||||
}
|
|
||||||
if err == nil && pingSuccess {
|
|
||||||
serverUp = 1
|
|
||||||
}
|
|
||||||
}
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricServerUp, prometheus.GaugeValue, serverUp,
|
|
||||||
)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) collectJailMetrics(ch chan<- prometheus.Metric, s *socket.Fail2BanSocket) {
|
|
||||||
jails, err := s.GetJails()
|
|
||||||
var count float64 = 0
|
|
||||||
if err != nil {
|
|
||||||
c.socketRequestErrorCount++
|
|
||||||
log.Print(err)
|
|
||||||
}
|
|
||||||
if err == nil {
|
|
||||||
count = float64(len(jails))
|
|
||||||
}
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricJailCount, prometheus.GaugeValue, count,
|
|
||||||
)
|
|
||||||
|
|
||||||
for i := range jails {
|
|
||||||
c.collectJailStatsMetric(ch, s, jails[i])
|
|
||||||
c.collectJailConfigMetrics(ch, s, jails[i])
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) collectJailStatsMetric(ch chan<- prometheus.Metric, s *socket.Fail2BanSocket, jail string) {
|
|
||||||
stats, err := s.GetJailStats(jail)
|
|
||||||
if err != nil {
|
|
||||||
c.socketRequestErrorCount++
|
|
||||||
log.Printf("failed to get stats for jail %s: %v", jail, err)
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricJailFailedCurrent, prometheus.GaugeValue, float64(stats.FailedCurrent), jail,
|
|
||||||
)
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricJailFailedTotal, prometheus.GaugeValue, float64(stats.FailedTotal), jail,
|
|
||||||
)
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricJailBannedCurrent, prometheus.GaugeValue, float64(stats.BannedCurrent), jail,
|
|
||||||
)
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricJailBannedTotal, prometheus.GaugeValue, float64(stats.BannedTotal), jail,
|
|
||||||
)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) collectJailConfigMetrics(ch chan<- prometheus.Metric, s *socket.Fail2BanSocket, jail string) {
|
|
||||||
banTime, err := s.GetJailBanTime(jail)
|
|
||||||
if err != nil {
|
|
||||||
c.socketRequestErrorCount++
|
|
||||||
log.Printf("failed to get ban time for jail %s: %v", jail, err)
|
|
||||||
} else {
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricJailBanTime, prometheus.GaugeValue, float64(banTime), jail,
|
|
||||||
)
|
|
||||||
}
|
|
||||||
findTime, err := s.GetJailFindTime(jail)
|
|
||||||
if err != nil {
|
|
||||||
c.socketRequestErrorCount++
|
|
||||||
log.Printf("failed to get find time for jail %s: %v", jail, err)
|
|
||||||
} else {
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricJailFindTime, prometheus.GaugeValue, float64(findTime), jail,
|
|
||||||
)
|
|
||||||
}
|
|
||||||
maxRetry, err := s.GetJailMaxRetries(jail)
|
|
||||||
if err != nil {
|
|
||||||
c.socketRequestErrorCount++
|
|
||||||
log.Printf("failed to get max retries for jail %s: %v", jail, err)
|
|
||||||
} else {
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricJailMaxRetry, prometheus.GaugeValue, float64(maxRetry), jail,
|
|
||||||
)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) collectVersionMetric(ch chan<- prometheus.Metric, s *socket.Fail2BanSocket) {
|
|
||||||
fail2banVersion, err := s.GetServerVersion()
|
|
||||||
if err != nil {
|
|
||||||
c.socketRequestErrorCount++
|
|
||||||
log.Printf("failed to get fail2ban server version: %v", err)
|
|
||||||
}
|
|
||||||
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricVersionInfo, prometheus.GaugeValue, float64(1), c.exporterVersion, fail2banVersion,
|
|
||||||
)
|
|
||||||
}
|
|
||||||
@@ -1,49 +0,0 @@
|
|||||||
package textfile
|
|
||||||
|
|
||||||
import (
|
|
||||||
"log"
|
|
||||||
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/cfg"
|
|
||||||
"github.com/prometheus/client_golang/prometheus"
|
|
||||||
)
|
|
||||||
|
|
||||||
type Collector struct {
|
|
||||||
enabled bool
|
|
||||||
folderPath string
|
|
||||||
fileMap map[string]*fileData
|
|
||||||
}
|
|
||||||
|
|
||||||
type fileData struct {
|
|
||||||
readErrors int
|
|
||||||
fileName string
|
|
||||||
fileContents []byte
|
|
||||||
}
|
|
||||||
|
|
||||||
func NewCollector(appSettings *cfg.AppSettings) *Collector {
|
|
||||||
collector := &Collector{
|
|
||||||
enabled: appSettings.FileCollectorPath != "",
|
|
||||||
folderPath: appSettings.FileCollectorPath,
|
|
||||||
fileMap: make(map[string]*fileData),
|
|
||||||
}
|
|
||||||
if collector.enabled {
|
|
||||||
log.Printf("reading textfile metrics from: %s", collector.folderPath)
|
|
||||||
}
|
|
||||||
return collector
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) Describe(ch chan<- *prometheus.Desc) {
|
|
||||||
if c.enabled {
|
|
||||||
ch <- metricReadError
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) Collect(ch chan<- prometheus.Metric) {
|
|
||||||
if c.enabled {
|
|
||||||
c.collectFileContents()
|
|
||||||
c.collectFileErrors(ch)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) appendErrorForPath(path string) {
|
|
||||||
c.fileMap[path].readErrors++
|
|
||||||
}
|
|
||||||
@@ -1,57 +0,0 @@
|
|||||||
package textfile
|
|
||||||
|
|
||||||
import (
|
|
||||||
"log"
|
|
||||||
"os"
|
|
||||||
"path/filepath"
|
|
||||||
"strings"
|
|
||||||
|
|
||||||
"github.com/prometheus/client_golang/prometheus"
|
|
||||||
)
|
|
||||||
|
|
||||||
const namespace = "textfile"
|
|
||||||
|
|
||||||
var (
|
|
||||||
metricReadError = prometheus.NewDesc(
|
|
||||||
prometheus.BuildFQName(namespace, "", "error"),
|
|
||||||
"Checks for errors while reading text files",
|
|
||||||
[]string{"path"}, nil,
|
|
||||||
)
|
|
||||||
)
|
|
||||||
|
|
||||||
func (c *Collector) collectFileContents() {
|
|
||||||
files, err := os.ReadDir(c.folderPath)
|
|
||||||
if err != nil {
|
|
||||||
log.Printf("error reading directory '%s': %v", c.folderPath, err)
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
for _, file := range files {
|
|
||||||
fileName := file.Name()
|
|
||||||
if !strings.HasSuffix(strings.ToLower(fileName), ".prom") {
|
|
||||||
continue
|
|
||||||
}
|
|
||||||
c.fileMap[fileName] = &fileData{
|
|
||||||
readErrors: 0,
|
|
||||||
fileName: fileName,
|
|
||||||
}
|
|
||||||
|
|
||||||
fullPath := filepath.Join(c.folderPath, fileName)
|
|
||||||
// #nosec G304
|
|
||||||
content, err := os.ReadFile(fullPath)
|
|
||||||
if err != nil {
|
|
||||||
c.appendErrorForPath(fileName)
|
|
||||||
log.Printf("error reading contents of file '%s': %v", fileName, err)
|
|
||||||
}
|
|
||||||
|
|
||||||
c.fileMap[fileName].fileContents = content
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func (c *Collector) collectFileErrors(ch chan<- prometheus.Metric) {
|
|
||||||
for _, f := range c.fileMap {
|
|
||||||
ch <- prometheus.MustNewConstMetric(
|
|
||||||
metricReadError, prometheus.GaugeValue, float64(f.readErrors), f.fileName,
|
|
||||||
)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,20 +0,0 @@
|
|||||||
package textfile
|
|
||||||
|
|
||||||
import (
|
|
||||||
"log"
|
|
||||||
"net/http"
|
|
||||||
)
|
|
||||||
|
|
||||||
func (c *Collector) WriteTextFileMetrics(w http.ResponseWriter, r *http.Request) {
|
|
||||||
if !c.enabled {
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
for _, f := range c.fileMap {
|
|
||||||
_, err := w.Write(f.fileContents)
|
|
||||||
if err != nil {
|
|
||||||
c.appendErrorForPath(f.fileName)
|
|
||||||
log.Printf("error writing file contents to response writer '%s': %v", f.fileName, err)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
# F2B_COLLECTOR_SOCKET=""
|
|
||||||
# F2B_COLLECTOR_TEXT_PATH=""
|
|
||||||
# F2B_WEB_LISTEN_ADDRESS=""
|
|
||||||
# F2B_WEB_BASICAUTH_USER=""
|
|
||||||
# F2B_WEB_BASICAUTH_PASS=""
|
|
||||||
# F2B_EXIT_ON_SOCKET_CONN_ERROR=""
|
|
||||||
@@ -0,0 +1,7 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import "log"
|
||||||
|
|
||||||
|
func main() {
|
||||||
|
log.Println("Not yet implemented")
|
||||||
|
}
|
||||||
@@ -1,27 +1,3 @@
|
|||||||
module git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter
|
module fail2ban-prometheus-exporter
|
||||||
|
|
||||||
go 1.23.0
|
go 1.15
|
||||||
|
|
||||||
toolchain go1.26.4
|
|
||||||
|
|
||||||
require (
|
|
||||||
github.com/alecthomas/kong v1.15.0
|
|
||||||
github.com/kisielk/og-rek v1.3.0
|
|
||||||
github.com/nlpodyssey/gopickle v0.3.0
|
|
||||||
github.com/prometheus/client_golang v1.23.2
|
|
||||||
)
|
|
||||||
|
|
||||||
require (
|
|
||||||
github.com/aristanetworks/gomap v0.0.0-20240919214256-2b26376628e1 // indirect
|
|
||||||
github.com/beorn7/perks v1.0.1 // indirect
|
|
||||||
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
||||||
github.com/kr/text v0.2.0 // indirect
|
|
||||||
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
||||||
github.com/prometheus/client_model v0.6.2 // indirect
|
|
||||||
github.com/prometheus/common v0.66.1 // indirect
|
|
||||||
github.com/prometheus/procfs v0.16.1 // indirect
|
|
||||||
go.yaml.in/yaml/v2 v2.4.2 // indirect
|
|
||||||
golang.org/x/sys v0.35.0 // indirect
|
|
||||||
golang.org/x/text v0.28.0 // indirect
|
|
||||||
google.golang.org/protobuf v1.36.8 // indirect
|
|
||||||
)
|
|
||||||
|
|||||||
@@ -1,62 +0,0 @@
|
|||||||
github.com/alecthomas/assert/v2 v2.11.0 h1:2Q9r3ki8+JYXvGsDyBXwH3LcJ+WK5D0gc5E8vS6K3D0=
|
|
||||||
github.com/alecthomas/assert/v2 v2.11.0/go.mod h1:Bze95FyfUr7x34QZrjL+XP+0qgp/zg8yS+TtBj1WA3k=
|
|
||||||
github.com/alecthomas/kong v1.15.0 h1:BVJstKbpO73zKpmIu+m/aLRrNmWwxXPIGTNin9VmLVI=
|
|
||||||
github.com/alecthomas/kong v1.15.0/go.mod h1:wrlbXem1CWqUV5Vbmss5ISYhsVPkBb1Yo7YKJghju2I=
|
|
||||||
github.com/alecthomas/repr v0.5.2 h1:SU73FTI9D1P5UNtvseffFSGmdNci/O6RsqzeXJtP0Qs=
|
|
||||||
github.com/alecthomas/repr v0.5.2/go.mod h1:Fr0507jx4eOXV7AlPV6AVZLYrLIuIeSOWtW57eE/O/4=
|
|
||||||
github.com/aristanetworks/gomap v0.0.0-20240919214256-2b26376628e1 h1:D5mrqTj0YyG8O2A2SUCuPc2Qf68vyTBaWChSBAJtYJk=
|
|
||||||
github.com/aristanetworks/gomap v0.0.0-20240919214256-2b26376628e1/go.mod h1:v/+Hpx3wuPnPWEwT1unZJsNUe4Pu/y1Y+qAf+xj0Ykg=
|
|
||||||
github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
|
|
||||||
github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
|
|
||||||
github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
|
|
||||||
github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
|
|
||||||
github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
|
|
||||||
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
|
|
||||||
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
|
|
||||||
github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
|
|
||||||
github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
|
|
||||||
github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM=
|
|
||||||
github.com/hexops/gotextdiff v1.0.3/go.mod h1:pSWU5MAI3yDq+fZBTazCSJysOMbxWL1BSow5/V2vxeg=
|
|
||||||
github.com/kisielk/og-rek v1.3.0 h1:lTXdQXqFETZKA//FWH4RBNAuiJ/dofxIwHAidoUZoMk=
|
|
||||||
github.com/kisielk/og-rek v1.3.0/go.mod h1:4at7oxyfBTDilURhNCf7irHWtosJlJl9uyqUqAkrP4w=
|
|
||||||
github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo=
|
|
||||||
github.com/klauspost/compress v1.18.0/go.mod h1:2Pp+KzxcywXVXMr50+X0Q/Lsb43OQHYWRCY2AiWywWQ=
|
|
||||||
github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
|
|
||||||
github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
|
|
||||||
github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
|
|
||||||
github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
|
|
||||||
github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
|
|
||||||
github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
|
|
||||||
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
|
|
||||||
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
|
|
||||||
github.com/nlpodyssey/gopickle v0.3.0 h1:BLUE5gxFLyyNOPzlXxt6GoHEMMxD0qhsE4p0CIQyoLw=
|
|
||||||
github.com/nlpodyssey/gopickle v0.3.0/go.mod h1:f070HJ/yR+eLi5WmM1OXJEGaTpuJEUiib19olXgYha0=
|
|
||||||
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
|
|
||||||
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
|
|
||||||
github.com/prometheus/client_golang v1.23.2 h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o=
|
|
||||||
github.com/prometheus/client_golang v1.23.2/go.mod h1:Tb1a6LWHB3/SPIzCoaDXI4I8UHKeFTEQ1YCr+0Gyqmg=
|
|
||||||
github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk=
|
|
||||||
github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE=
|
|
||||||
github.com/prometheus/common v0.66.1 h1:h5E0h5/Y8niHc5DlaLlWLArTQI7tMrsfQjHV+d9ZoGs=
|
|
||||||
github.com/prometheus/common v0.66.1/go.mod h1:gcaUsgf3KfRSwHY4dIMXLPV0K/Wg1oZ8+SbZk/HH/dA=
|
|
||||||
github.com/prometheus/procfs v0.16.1 h1:hZ15bTNuirocR6u0JZ6BAHHmwS1p8B4P6MRqxtzMyRg=
|
|
||||||
github.com/prometheus/procfs v0.16.1/go.mod h1:teAbpZRB1iIAJYREa1LsoWUXykVXA1KlTmWl8x/U+Is=
|
|
||||||
github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
|
|
||||||
github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
|
|
||||||
github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
|
|
||||||
github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
|
|
||||||
go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
|
|
||||||
go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
|
|
||||||
go.yaml.in/yaml/v2 v2.4.2 h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI=
|
|
||||||
go.yaml.in/yaml/v2 v2.4.2/go.mod h1:081UH+NErpNdqlCXm3TtEran0rJZGxAYx9hb/ELlsPU=
|
|
||||||
golang.org/x/sys v0.35.0 h1:vz1N37gP5bs89s7He8XuIYXpyY0+QlsKmzipCbUtyxI=
|
|
||||||
golang.org/x/sys v0.35.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
|
|
||||||
golang.org/x/text v0.28.0 h1:rhazDwis8INMIwQ4tpjLDzUhx6RlXqZNPEM0huQojng=
|
|
||||||
golang.org/x/text v0.28.0/go.mod h1:U8nCwOR8jO/marOQ0QbDiOngZVEBB7MAiitBuMjXiNU=
|
|
||||||
google.golang.org/protobuf v1.36.8 h1:xHScyCOEuuwZEc6UtSOvPbAT4zRh0xcNRYekJwfqyMc=
|
|
||||||
google.golang.org/protobuf v1.36.8/go.mod h1:fuxRtAxBytpl4zzqUh6/eyUujkJdNiuEkXntxiD/uRU=
|
|
||||||
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
|
|
||||||
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
|
|
||||||
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
|
|
||||||
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
|
|
||||||
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
|
|
||||||
|
|||||||
@@ -1,64 +0,0 @@
|
|||||||
package main
|
|
||||||
|
|
||||||
import (
|
|
||||||
"fmt"
|
|
||||||
"log"
|
|
||||||
"os"
|
|
||||||
"os/signal"
|
|
||||||
"syscall"
|
|
||||||
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/cfg"
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/collector/f2b"
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/collector/textfile"
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/server"
|
|
||||||
"github.com/prometheus/client_golang/prometheus"
|
|
||||||
)
|
|
||||||
|
|
||||||
var (
|
|
||||||
version = "dev"
|
|
||||||
date = "unknown"
|
|
||||||
)
|
|
||||||
|
|
||||||
func printAppVersion() {
|
|
||||||
fmt.Printf("Version: %s\n", version)
|
|
||||||
fmt.Printf("Build date: %s\n", date)
|
|
||||||
}
|
|
||||||
|
|
||||||
func main() {
|
|
||||||
appSettings := cfg.Parse()
|
|
||||||
if appSettings.VersionMode {
|
|
||||||
printAppVersion()
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
handleGracefulShutdown()
|
|
||||||
log.Printf("fail2ban exporter version %s", version)
|
|
||||||
log.Printf("starting server at %s", appSettings.MetricsAddress)
|
|
||||||
|
|
||||||
f2bCollector := f2b.NewExporter(appSettings, version)
|
|
||||||
prometheus.MustRegister(f2bCollector)
|
|
||||||
|
|
||||||
textFileCollector := textfile.NewCollector(appSettings)
|
|
||||||
prometheus.MustRegister(textFileCollector)
|
|
||||||
|
|
||||||
if !appSettings.DryRunMode {
|
|
||||||
svrErr := server.StartServer(appSettings, textFileCollector)
|
|
||||||
err := <-svrErr
|
|
||||||
log.Fatal(err)
|
|
||||||
} else {
|
|
||||||
log.Print("running in dry-run mode - exiting")
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func handleGracefulShutdown() {
|
|
||||||
var signals = make(chan os.Signal, 1)
|
|
||||||
|
|
||||||
signal.Notify(signals, syscall.SIGTERM)
|
|
||||||
signal.Notify(signals, syscall.SIGINT)
|
|
||||||
|
|
||||||
go func() {
|
|
||||||
sig := <-signals
|
|
||||||
log.Printf("caught signal: %+v", sig)
|
|
||||||
os.Exit(0)
|
|
||||||
}()
|
|
||||||
}
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
{
|
|
||||||
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
||||||
"extends": [
|
|
||||||
"local>volker.raschek/renovate-config:default#master",
|
|
||||||
"local>volker.raschek/renovate-config:container#master",
|
|
||||||
"local>volker.raschek/renovate-config:actions#master",
|
|
||||||
"local>volker.raschek/renovate-config:golang#master",
|
|
||||||
"local>volker.raschek/renovate-config:regexp#master"
|
|
||||||
]
|
|
||||||
}
|
|
||||||
@@ -1,17 +0,0 @@
|
|||||||
package server
|
|
||||||
|
|
||||||
import (
|
|
||||||
"net/http"
|
|
||||||
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/auth"
|
|
||||||
)
|
|
||||||
|
|
||||||
func AuthMiddleware(handlerFunc http.HandlerFunc, authProvider auth.AuthProvider) http.HandlerFunc {
|
|
||||||
return func(w http.ResponseWriter, r *http.Request) {
|
|
||||||
if authProvider.IsAllowed(r) {
|
|
||||||
handlerFunc.ServeHTTP(w, r)
|
|
||||||
} else {
|
|
||||||
w.WriteHeader(http.StatusUnauthorized)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,46 +0,0 @@
|
|||||||
package server
|
|
||||||
|
|
||||||
import (
|
|
||||||
"net/http"
|
|
||||||
"net/http/httptest"
|
|
||||||
"testing"
|
|
||||||
)
|
|
||||||
|
|
||||||
type testAuthProvider struct {
|
|
||||||
match bool
|
|
||||||
}
|
|
||||||
|
|
||||||
func (p testAuthProvider) IsAllowed(request *http.Request) bool {
|
|
||||||
return p.match
|
|
||||||
}
|
|
||||||
|
|
||||||
func newTestRequest() *http.Request {
|
|
||||||
return httptest.NewRequest(http.MethodGet, "http://example.com", nil)
|
|
||||||
}
|
|
||||||
|
|
||||||
func executeAuthMiddlewareTest(t *testing.T, authMatches bool, expectedCode int, expectedCallCount int) {
|
|
||||||
callCount := 0
|
|
||||||
testHandler := func(w http.ResponseWriter, r *http.Request) {
|
|
||||||
callCount++
|
|
||||||
}
|
|
||||||
|
|
||||||
handler := AuthMiddleware(testHandler, testAuthProvider{match: authMatches})
|
|
||||||
recorder := httptest.NewRecorder()
|
|
||||||
request := newTestRequest()
|
|
||||||
handler.ServeHTTP(recorder, request)
|
|
||||||
|
|
||||||
if recorder.Code != expectedCode {
|
|
||||||
t.Errorf("statusCode = %v, want %v", recorder.Code, expectedCode)
|
|
||||||
}
|
|
||||||
if callCount != expectedCallCount {
|
|
||||||
t.Errorf("callCount = %v, want %v", callCount, expectedCallCount)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func Test_GIVEN_MatchingBasicAuth_WHEN_MethodCalled_THEN_RequestProcessed(t *testing.T) {
|
|
||||||
executeAuthMiddlewareTest(t, true, http.StatusOK, 1)
|
|
||||||
}
|
|
||||||
|
|
||||||
func Test_GIVEN_NonMatchingBasicAuth_WHEN_MethodCalled_THEN_RequestRejected(t *testing.T) {
|
|
||||||
executeAuthMiddlewareTest(t, false, http.StatusUnauthorized, 0)
|
|
||||||
}
|
|
||||||
@@ -1,33 +0,0 @@
|
|||||||
package server
|
|
||||||
|
|
||||||
import (
|
|
||||||
"log"
|
|
||||||
"net/http"
|
|
||||||
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/collector/textfile"
|
|
||||||
"github.com/prometheus/client_golang/prometheus/promhttp"
|
|
||||||
)
|
|
||||||
|
|
||||||
const (
|
|
||||||
metricsPath = "/metrics"
|
|
||||||
)
|
|
||||||
|
|
||||||
func rootHtmlHandler(w http.ResponseWriter, r *http.Request) {
|
|
||||||
_, err := w.Write([]byte(
|
|
||||||
`<html>
|
|
||||||
<head><title>Fail2Ban Exporter</title></head>
|
|
||||||
<body>
|
|
||||||
<h1>Fail2Ban Exporter</h1>
|
|
||||||
<p><a href="` + metricsPath + `">Metrics</a></p>
|
|
||||||
</body>
|
|
||||||
</html>`))
|
|
||||||
if err != nil {
|
|
||||||
log.Printf("error handling root url: %v", err)
|
|
||||||
w.WriteHeader(http.StatusInternalServerError)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
func metricHandler(w http.ResponseWriter, r *http.Request, collector *textfile.Collector) {
|
|
||||||
promhttp.Handler().ServeHTTP(w, r)
|
|
||||||
collector.WriteTextFileMetrics(w, r)
|
|
||||||
}
|
|
||||||
@@ -1,41 +0,0 @@
|
|||||||
package server
|
|
||||||
|
|
||||||
import (
|
|
||||||
"log"
|
|
||||||
"net/http"
|
|
||||||
"time"
|
|
||||||
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/cfg"
|
|
||||||
"git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter/collector/textfile"
|
|
||||||
)
|
|
||||||
|
|
||||||
func StartServer(
|
|
||||||
appSettings *cfg.AppSettings,
|
|
||||||
textFileCollector *textfile.Collector,
|
|
||||||
) chan error {
|
|
||||||
http.HandleFunc("/", AuthMiddleware(
|
|
||||||
rootHtmlHandler,
|
|
||||||
appSettings.AuthProvider,
|
|
||||||
))
|
|
||||||
http.HandleFunc(metricsPath, AuthMiddleware(
|
|
||||||
func(w http.ResponseWriter, r *http.Request) {
|
|
||||||
metricHandler(w, r, textFileCollector)
|
|
||||||
},
|
|
||||||
appSettings.AuthProvider,
|
|
||||||
))
|
|
||||||
log.Printf("metrics available at '%s'", metricsPath)
|
|
||||||
|
|
||||||
svrErr := make(chan error)
|
|
||||||
go func() {
|
|
||||||
httpServer := &http.Server{
|
|
||||||
Addr: appSettings.MetricsAddress,
|
|
||||||
ReadHeaderTimeout: 10 * time.Second,
|
|
||||||
ReadTimeout: 10 * time.Second,
|
|
||||||
WriteTimeout: 10 * time.Second,
|
|
||||||
IdleTimeout: 30 * time.Second,
|
|
||||||
}
|
|
||||||
svrErr <- httpServer.ListenAndServe()
|
|
||||||
}()
|
|
||||||
log.Print("ready")
|
|
||||||
return svrErr
|
|
||||||
}
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
package socket
|
|
||||||
|
|
||||||
// Py_builtins_str is used by the pickle decoder to parse the server response into a format Go can understand
|
|
||||||
type Py_builtins_str struct{}
|
|
||||||
|
|
||||||
func (c Py_builtins_str) Call(args ...interface{}) (interface{}, error) {
|
|
||||||
return args[0], nil
|
|
||||||
}
|
|
||||||
@@ -1,179 +0,0 @@
|
|||||||
package socket
|
|
||||||
|
|
||||||
import (
|
|
||||||
"fmt"
|
|
||||||
"github.com/kisielk/og-rek"
|
|
||||||
"github.com/nlpodyssey/gopickle/types"
|
|
||||||
"net"
|
|
||||||
"strings"
|
|
||||||
)
|
|
||||||
|
|
||||||
type Fail2BanSocket struct {
|
|
||||||
socket net.Conn
|
|
||||||
encoder *ogórek.Encoder
|
|
||||||
}
|
|
||||||
|
|
||||||
type JailStats struct {
|
|
||||||
FailedCurrent int
|
|
||||||
FailedTotal int
|
|
||||||
BannedCurrent int
|
|
||||||
BannedTotal int
|
|
||||||
}
|
|
||||||
|
|
||||||
func ConnectToSocket(path string) (*Fail2BanSocket, error) {
|
|
||||||
c, err := net.Dial("unix", path)
|
|
||||||
if err != nil {
|
|
||||||
return nil, err
|
|
||||||
}
|
|
||||||
return &Fail2BanSocket{
|
|
||||||
socket: c,
|
|
||||||
encoder: ogórek.NewEncoder(c),
|
|
||||||
}, nil
|
|
||||||
}
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) Close() error {
|
|
||||||
return s.socket.Close()
|
|
||||||
}
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) Ping() (bool, error) {
|
|
||||||
response, err := s.sendCommand([]string{pingCommand, "100"})
|
|
||||||
if err != nil {
|
|
||||||
return false, newConnectionError(pingCommand, err)
|
|
||||||
}
|
|
||||||
|
|
||||||
if t, ok := response.(*types.Tuple); ok {
|
|
||||||
if (*t)[1] == "pong" {
|
|
||||||
return true, nil
|
|
||||||
}
|
|
||||||
return false, fmt.Errorf("unexpected response data (expecting 'pong'): %s", (*t)[1])
|
|
||||||
}
|
|
||||||
return false, newBadFormatError(pingCommand, response)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) GetJails() ([]string, error) {
|
|
||||||
response, err := s.sendCommand([]string{statusCommand})
|
|
||||||
if err != nil {
|
|
||||||
return nil, err
|
|
||||||
}
|
|
||||||
|
|
||||||
if lvl1, ok := response.(*types.Tuple); ok {
|
|
||||||
if lvl2, ok := lvl1.Get(1).(*types.List); ok {
|
|
||||||
if lvl3, ok := lvl2.Get(1).(*types.Tuple); ok {
|
|
||||||
if lvl4, ok := lvl3.Get(1).(string); ok {
|
|
||||||
splitJails := strings.Split(lvl4, ",")
|
|
||||||
return trimSpaceForAll(splitJails), nil
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return nil, newBadFormatError(statusCommand, response)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) GetJailStats(jail string) (JailStats, error) {
|
|
||||||
response, err := s.sendCommand([]string{statusCommand, jail})
|
|
||||||
if err != nil {
|
|
||||||
return JailStats{}, err
|
|
||||||
}
|
|
||||||
|
|
||||||
stats := JailStats{
|
|
||||||
FailedCurrent: -1,
|
|
||||||
FailedTotal: -1,
|
|
||||||
BannedCurrent: -1,
|
|
||||||
BannedTotal: -1,
|
|
||||||
}
|
|
||||||
|
|
||||||
if lvl1, ok := response.(*types.Tuple); ok {
|
|
||||||
if lvl2, ok := lvl1.Get(1).(*types.List); ok {
|
|
||||||
if filter, ok := lvl2.Get(0).(*types.Tuple); ok {
|
|
||||||
if filterLvl1, ok := filter.Get(1).(*types.List); ok {
|
|
||||||
if filterCurrentTuple, ok := filterLvl1.Get(0).(*types.Tuple); ok {
|
|
||||||
if filterCurrent, ok := filterCurrentTuple.Get(1).(int); ok {
|
|
||||||
stats.FailedCurrent = filterCurrent
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if filterTotalTuple, ok := filterLvl1.Get(1).(*types.Tuple); ok {
|
|
||||||
if filterTotal, ok := filterTotalTuple.Get(1).(int); ok {
|
|
||||||
stats.FailedTotal = filterTotal
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if actions, ok := lvl2.Get(1).(*types.Tuple); ok {
|
|
||||||
if actionsLvl1, ok := actions.Get(1).(*types.List); ok {
|
|
||||||
if actionsCurrentTuple, ok := actionsLvl1.Get(0).(*types.Tuple); ok {
|
|
||||||
if actionsCurrent, ok := actionsCurrentTuple.Get(1).(int); ok {
|
|
||||||
stats.BannedCurrent = actionsCurrent
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if actionsTotalTuple, ok := actionsLvl1.Get(1).(*types.Tuple); ok {
|
|
||||||
if actionsTotal, ok := actionsTotalTuple.Get(1).(int); ok {
|
|
||||||
stats.BannedTotal = actionsTotal
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return stats, nil
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return stats, newBadFormatError(statusCommand, response)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) GetJailBanTime(jail string) (int, error) {
|
|
||||||
command := fmt.Sprintf(banTimeCommandFmt, jail)
|
|
||||||
return s.sendSimpleIntCommand(command)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) GetJailFindTime(jail string) (int, error) {
|
|
||||||
command := fmt.Sprintf(findTimeCommandFmt, jail)
|
|
||||||
return s.sendSimpleIntCommand(command)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) GetJailMaxRetries(jail string) (int, error) {
|
|
||||||
command := fmt.Sprintf(maxRetriesCommandFmt, jail)
|
|
||||||
return s.sendSimpleIntCommand(command)
|
|
||||||
}
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) GetServerVersion() (string, error) {
|
|
||||||
response, err := s.sendCommand([]string{versionCommand})
|
|
||||||
if err != nil {
|
|
||||||
return "", err
|
|
||||||
}
|
|
||||||
|
|
||||||
if lvl1, ok := response.(*types.Tuple); ok {
|
|
||||||
if versionStr, ok := lvl1.Get(1).(string); ok {
|
|
||||||
return versionStr, nil
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return "", newBadFormatError(versionCommand, response)
|
|
||||||
}
|
|
||||||
|
|
||||||
// sendSimpleIntCommand sends a command to the fail2ban socket and parses the response to extract an int.
|
|
||||||
// This command assumes that the response data is in the format of `(d, d)` where `d` is a number.
|
|
||||||
func (s *Fail2BanSocket) sendSimpleIntCommand(command string) (int, error) {
|
|
||||||
response, err := s.sendCommand(strings.Split(command, " "))
|
|
||||||
if err != nil {
|
|
||||||
return -1, err
|
|
||||||
}
|
|
||||||
|
|
||||||
if lvl1, ok := response.(*types.Tuple); ok {
|
|
||||||
if banTime, ok := lvl1.Get(1).(int); ok {
|
|
||||||
return banTime, nil
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return -1, newBadFormatError(command, response)
|
|
||||||
}
|
|
||||||
|
|
||||||
func newBadFormatError(command string, data interface{}) error {
|
|
||||||
return fmt.Errorf("(%s) unexpected response format - cannot parse: %v", command, data)
|
|
||||||
}
|
|
||||||
|
|
||||||
func newConnectionError(command string, err error) error {
|
|
||||||
return fmt.Errorf("(%s) failed to send command through socket: %v", command, err)
|
|
||||||
}
|
|
||||||
|
|
||||||
func trimSpaceForAll(slice []string) []string {
|
|
||||||
for i := range slice {
|
|
||||||
slice[i] = strings.TrimSpace(slice[i])
|
|
||||||
}
|
|
||||||
return slice
|
|
||||||
}
|
|
||||||
@@ -1,70 +0,0 @@
|
|||||||
package socket
|
|
||||||
|
|
||||||
import (
|
|
||||||
"bufio"
|
|
||||||
"bytes"
|
|
||||||
"fmt"
|
|
||||||
|
|
||||||
"github.com/nlpodyssey/gopickle/pickle"
|
|
||||||
)
|
|
||||||
|
|
||||||
const (
|
|
||||||
commandTerminator = "<F2B_END_COMMAND>"
|
|
||||||
pingCommand = "ping"
|
|
||||||
statusCommand = "status"
|
|
||||||
versionCommand = "version"
|
|
||||||
banTimeCommandFmt = "get %s bantime"
|
|
||||||
findTimeCommandFmt = "get %s findtime"
|
|
||||||
maxRetriesCommandFmt = "get %s maxretry"
|
|
||||||
socketReadBufferSize = 1024
|
|
||||||
)
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) sendCommand(command []string) (interface{}, error) {
|
|
||||||
err := s.write(command)
|
|
||||||
if err != nil {
|
|
||||||
return nil, err
|
|
||||||
}
|
|
||||||
return s.read()
|
|
||||||
}
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) write(command []string) error {
|
|
||||||
err := s.encoder.Encode(command)
|
|
||||||
if err != nil {
|
|
||||||
return err
|
|
||||||
}
|
|
||||||
_, err = s.socket.Write([]byte(commandTerminator))
|
|
||||||
if err != nil {
|
|
||||||
return err
|
|
||||||
}
|
|
||||||
return nil
|
|
||||||
}
|
|
||||||
|
|
||||||
func (s *Fail2BanSocket) read() (interface{}, error) {
|
|
||||||
reader := bufio.NewReader(s.socket)
|
|
||||||
|
|
||||||
data := []byte{}
|
|
||||||
for {
|
|
||||||
buf := make([]byte, socketReadBufferSize)
|
|
||||||
_, err := reader.Read(buf)
|
|
||||||
if err != nil {
|
|
||||||
return nil, err
|
|
||||||
}
|
|
||||||
data = append(data, buf...)
|
|
||||||
containsTerminator := bytes.Contains(data, []byte(commandTerminator))
|
|
||||||
if containsTerminator {
|
|
||||||
break
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
bufReader := bytes.NewReader(data)
|
|
||||||
unpickler := pickle.NewUnpickler(bufReader)
|
|
||||||
|
|
||||||
unpickler.FindClass = func(module, name string) (interface{}, error) {
|
|
||||||
if (module == "builtins" || module == "__builtin__") && name == "str" {
|
|
||||||
return &Py_builtins_str{}, nil
|
|
||||||
}
|
|
||||||
return nil, fmt.Errorf("class not found: %s: %s", module, name)
|
|
||||||
}
|
|
||||||
|
|
||||||
return unpickler.Load()
|
|
||||||
}
|
|
||||||
@@ -1,22 +0,0 @@
|
|||||||
[Unit]
|
|
||||||
Description=Prometheus exporter for fail2ban metrics
|
|
||||||
Requires=network-online.target
|
|
||||||
After=network-online.target
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
EnvironmentFile=/etc/conf.d/EXECUTABLE
|
|
||||||
ExecStart=/usr/bin/EXECUTABLE
|
|
||||||
ExecReload=/bin/kill -HUP $MAINPID
|
|
||||||
Restart=on-failure
|
|
||||||
RestartSec=5s
|
|
||||||
|
|
||||||
NoNewPrivileges=true
|
|
||||||
|
|
||||||
# NOTE: Would be great to create and use a dedicated user/group via
|
|
||||||
# sysusers.conf to access the fail2ban socket, but currently it is no possible
|
|
||||||
# without manual configuration of the fail2ban daemon.
|
|
||||||
User=root
|
|
||||||
Group=root
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
Reference in New Issue
Block a user