From a55be8d794d448a10a07c26e20397107192a58d9 Mon Sep 17 00:00:00 2001 From: Izorkin Date: Mon, 2 Dec 2019 16:25:18 +0300 Subject: [PATCH] nixos/fail2ban: update serviceConfig --- nixos/modules/services/security/fail2ban.nix | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/nixos/modules/services/security/fail2ban.nix b/nixos/modules/services/security/fail2ban.nix index eb4a4f2eb51..13619eda8e7 100644 --- a/nixos/modules/services/security/fail2ban.nix +++ b/nixos/modules/services/security/fail2ban.nix @@ -139,19 +139,15 @@ in path = [ cfg.package cfg.packageFirewall pkgs.iproute ]; - preStart = '' - mkdir -p /var/lib/fail2ban - ''; - unitConfig.Documentation = "man:fail2ban(1)"; serviceConfig = { - Type = "forking"; ExecStart = "${cfg.package}/bin/fail2ban-server -xf start"; ExecStop = "${cfg.package}/bin/fail2ban-server stop"; ExecReload = "${cfg.package}/bin/fail2ban-server reload"; + Type = "simple"; + Restart = "on-failure"; PIDFile = "/run/fail2ban/fail2ban.pid"; - Restart = "always"; ReadOnlyDirectories = "/"; ReadWriteDirectories = "/run/fail2ban /var/tmp /var/lib";