Clément Désiles 40cc0efcf8 fix(fail2ban): use ProtectSystem=full so ufw can create its lock file ...

strict makes /run read-only, which blocks ufw's /run/ufw.lock and
cannot be whitelisted via ReadWritePaths (the file does not exist).
full still protects /usr and /etc while leaving /run and /var writable,
so only /etc/ufw needs an explicit write path.

2026-09-05 16:28:55 +02:00

..

fail2ban.local.j2

fix(fail2ban): start under ProtectSystem=strict hardening

2026-09-05 16:21:49 +02:00

hardened.fail2ban.conf.j2

fix(fail2ban): use ProtectSystem=full so ufw can create its lock file

2026-09-05 16:28:55 +02:00

jail.local.j2

chore: first commit

2025-07-25 20:23:54 +02:00

nginx-jail.local.j2

chore: first commit

2025-07-25 20:23:54 +02:00

sshd-jail.local.j2

chore: first commit

2025-07-25 20:23:54 +02:00