diff --git a/roles/common/templates/etc/systemd/system/fail2ban.service.d/override.conf.j2 b/roles/common/templates/etc/systemd/system/fail2ban.service.d/override.conf.j2 index 7e9fd50..66e4cde 100644 --- a/roles/common/templates/etc/systemd/system/fail2ban.service.d/override.conf.j2 +++ b/roles/common/templates/etc/systemd/system/fail2ban.service.d/override.conf.j2 @@ -1,3 +1,7 @@ +[Unit] +# If nftables is stopped or restarted, propagate to fail2ban as well +PartOf=nftables.service + [Service] PrivateDevices=yes PrivateTmp=yes diff --git a/roles/common/templates/update-firehol-nftables.sh.j2 b/roles/common/templates/update-firehol-nftables.sh.j2 index bb59dd2..23f70e4 100755 --- a/roles/common/templates/update-firehol-nftables.sh.j2 +++ b/roles/common/templates/update-firehol-nftables.sh.j2 @@ -58,8 +58,8 @@ NFT_HEAD rm -f "$firehol_level1_ipv4_list_temp" "$firehol_level1_ipv4_set_temp" fi -echo "Reloading nftables" +echo "Restarting nftables" -/usr/bin/systemctl reload nftables.service +/usr/bin/systemctl restart nftables.service rm -v firehol_level1.netset