Move to using hiera

data/Debian.yaml

+lysnetwork::ssh::client_package: openssh-client

data/RedHat.yaml

+lysnetwork::ssh::service_name: sshd

data/SUSE.yaml

+lysnetwork::ssh::server_package: openssh
+lysnetwork::ssh::service_name: sshd

data/common.yaml

---- {}
+---
+lysnetwork::ssh::server_package: openssh-server
+lysnetwork::ssh::client_package: openssh
+lysnetwork::ssh::service_name: ssh

manifests/ssh.pp

-#This class manages ssh-clients and ensures that fail2ban is installed with configs.
-class lysnetwork::ssh {
-  $server_package = $facts['os']['name'] ? {
-    'centos'   => 'openssh-server',
-    'OpenSuSE' => 'openssh',
-    default    => 'openssh-server',
-  }
-
-  $client_package = $facts['os']['name'] ? {
-    'centos'   => 'openssh',
-    'OpenSuSE' => 'openssh',
-    'Debian'   => 'openssh-client',
-    'Ubuntu'   => 'openssh-client',
-    default    => 'openssh',
-  }
+#This class manages ssh-clients and servers.
+class lysnetwork::ssh(
+  $server_package = undef,
+  $client_package = undef,
+  $service_name = undef
+) {
 
-  $service_name = $facts['os']['name'] ? {
-    'centos'   => 'sshd',
-    'OpenSuSE' => 'sshd',
-    default    => 'ssh',
-  }
-
-  package { $server_package:
-    ensure => installed,
-  }
-
-  package { $client_package:
-    ensure => installed,
-  }
+  ensure_packages([$server_package, $client_package])
 
   service { $service_name:
     ensure    => running,
@@ -64,34 +43,4 @@ class lysnetwork::ssh {
       source => "puppet:///modules/lysnetwork/ssh/ssh_config-${facts['os']['name']}",
   }
 
-  package { 'fail2ban':
-    ensure => installed,
-    before => File['/etc/fail2ban/jail.local'],
-  }
-
-  service { 'fail2ban':
-    ensure  => running,
-    enable  => true,
-    require => [ Package['fail2ban'],
-      File['/etc/fail2ban/jail.local'],
-    File['/etc/fail2ban/action.d/iptables-common.conf'],],
-  }
-
-  file {
-    '/etc/fail2ban/jail.local':
-      ensure => file,
-      owner  => 'root',
-      group  => 'root',
-      mode   => '0644',
-      source => "puppet:///modules/lysnetwork/fail2ban/jail_local_ssh-${facts['os']['name']}",
-  }
-
-  file {
-    '/etc/fail2ban/action.d/iptables-common.conf':
-      ensure => file,
-      owner  => 'root',
-      group  => 'root',
-      mode   => '0644',
-      source => 'puppet:///modules/lysnetwork/fail2ban/actions_iptable_common',
-  }
 }