cellinfo
/
ansible.nftables
2
0
Fork 0
Code Issues Pull Requests Releases Activity

Drop fail2ban restart from nftables unit

This commit is contained in:
Jeremy Gardais 2021-07-30 09:36:24 +02:00
parent 89619c8ef3
commit 1674155bab
Signed by: jegardai
GPG Key ID: E759BAA22501AF32
1 changed files with 0 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
templates/lib/systemd/system/nftables.service.j2
View File

@ -12,15 +12,9 @@ StandardInput=null
ProtectSystem=full ProtectSystem=full
ProtectHome=true ProtectHome=true
{% endif %} {% endif %}
{% if nft__fail2ban_service %}
ExecStart=/usr/sbin/nft -f {{ nft_main_conf_path }} ; /bin/systemctl restart fail2ban.service
ExecReload=/usr/sbin/nft -f {{ nft_main_conf_path }} ; /bin/systemctl restart fail2ban.service
ExecStop=/bin/systemctl stop fail2ban.service ; /usr/sbin/nft flush ruleset
{% else %}
ExecStart=/usr/sbin/nft -f {{ nft_main_conf_path }} ExecStart=/usr/sbin/nft -f {{ nft_main_conf_path }}
ExecReload=/usr/sbin/nft -f {{ nft_main_conf_path }} ExecReload=/usr/sbin/nft -f {{ nft_main_conf_path }}
ExecStop=/usr/sbin/nft flush ruleset ExecStop=/usr/sbin/nft flush ruleset
{% endif %}
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target