class Fail2ban < Formula desc "Scan log files and ban IPs showing malicious signs" homepage "https://www.fail2ban.org/" url "https://github.com/fail2ban/fail2ban/archive/0.10.0.tar.gz" sha256 "3517b68bff71924f179609eb51dd2fe66d78653646528cdf8edf2370ff047c80" bottle do sha256 "126df67c8b1f6ed5ad4284fa375a792775cefe614b09502f80b15b1232ab3611" => :high_sierra sha256 "9b116287cbc7a0382bb31523f60986c6b3106b367a0f59e2bc4b98b7efd4d39d" => :sierra sha256 "9b116287cbc7a0382bb31523f60986c6b3106b367a0f59e2bc4b98b7efd4d39d" => :el_capitan sha256 "9b116287cbc7a0382bb31523f60986c6b3106b367a0f59e2bc4b98b7efd4d39d" => :yosemite end depends_on "help2man" => :build depends_on "sphinx-doc" => :build def install ENV.prepend_create_path "PYTHONPATH", libexec/"lib/python2.7/site-packages" rm "setup.cfg" Dir["config/paths-*.conf"].each do |r| next if File.basename(r) =~ /paths-common\.conf|paths-osx\.conf/ rm r end # Replace hardcoded paths inreplace "setup.py" do |s| s.gsub! %r{/etc}, etc s.gsub! %r{/var}, var end inreplace Dir["config/{action,filter}.d/**/*"].select { |ff| File.file?(ff) }.each do |s| s.gsub! %r{/etc}, etc, false s.gsub! %r{/var}, var, false end inreplace ["config/fail2ban.conf", "config/paths-common.conf", "doc/run-rootless.txt"].each do |s| s.gsub! %r{/etc}, etc s.gsub! %r{/var}, var end inreplace Dir["fail2ban/client/*"].each do |s| s.gsub! %r{/etc}, etc, false s.gsub! %r{/var}, var, false end inreplace "fail2ban/server/asyncserver.py", "/var/run/fail2ban/fail2ban.sock", var/"run/fail2ban/fail2ban.sock" inreplace Dir["fail2ban/tests/**/*"].select { |ff| File.file?(ff) }.each do |s| s.gsub! %r{/etc}, etc, false s.gsub! %r{/var}, var, false end inreplace Dir["man/*"].each do |s| s.gsub! %r{/etc}, etc, false s.gsub! %r{/var}, var, false end # Fix doc compilation inreplace "setup.py", "/usr/share/doc/fail2ban", (share/"doc") inreplace "setup.py", "if os.path.exists('#{var}/run')", "if True" inreplace "setup.py", "platform_system in ('linux',", "platform_system in ('linux', 'darwin'," system "python", "setup.py", "install", "--prefix=#{libexec}" cd "doc" do system "make", "dirhtml", "SPHINXBUILD=sphinx-build" (share/"doc").install "build/dirhtml" end bin.install Dir[libexec/"bin/*"] bin.env_script_all_files(libexec/"bin", :PYTHONPATH => ENV["PYTHONPATH"]) man1.install Dir["man/*.1"] man5.install "man/jail.conf.5" end def post_install (etc/"fail2ban").mkpath (var/"run/fail2ban").mkpath end def caveats <<-EOS.undent Before using Fail2Ban for the first time you should edit the jail configuration and enable the jails that you want to use, for instance ssh-ipfw. Also, make sure that they point to the correct configuration path. I.e. on Mountain Lion the sshd logfile should point to /var/log/system.log. * #{etc}/fail2ban/jail.conf The Fail2Ban wiki has two pages with instructions for macOS Server that describes how to set up the Jails for the standard macOS Server services for the respective releases. 10.4: https://www.fail2ban.org/wiki/index.php/HOWTO_Mac_OS_X_Server_(10.4) 10.5: https://www.fail2ban.org/wiki/index.php/HOWTO_Mac_OS_X_Server_(10.5) Please do not forget to update your configuration files. They are in #{etc}/fail2ban. EOS end plist_options :startup => true def plist; <<-EOS.undent Label #{plist_name} ProgramArguments #{opt_bin}/fail2ban-client -x start RunAtLoad EOS end test do system "#{bin}/fail2ban-client", "--test" end end