fix(fail2ban): pass blocktype via banaction to override the ufw action default

jail-level blocktype is ignored (action [Init] wins); it must be passed as banaction = ufw[blocktype=deny].
2026-09-05 16:57:45 +02:00
parent 6355a9aae5
commit 24502f543f
1 changed files with 1 additions and 2 deletions
@@ -1,8 +1,7 @@
 [DEFAULT]
 bantime    = 1d
-banaction  = {{fail2ban_firewall}}
+banaction  = {{fail2ban_firewall}}[blocktype={{fail2ban_blocktype}}]
 allowipv6  = true
 ignoreip   = 127.0.0.1/8
 backend    = {{fail2ban_backend}}
-blocktype  = {{fail2ban_blocktype}}
 ignoreself = true