fail2ban template fix

2023-11-11 23:59:49 +01:00 · 2023-11-11 23:59:49 +01:00 · ef05942f0c
parent 2737e16429
commit ef05942f0c
1 changed files with 11 additions and 2 deletions
--- a/templates/etc/logrotate.d/fail2ban.j2
+++ b/templates/etc/logrotate.d/fail2ban.j2
@ -3,8 +3,17 @@
    {{ item.when }}
    rotate {{ item.keep }}
    compress
+    # Do not rotate if empty
+    notifempty
+ 
    delaycompress
    missingok
-    notifempty
-    create 0640 root root
+    postrotate
+    fail2ban-client flushlogs 1>/dev/null
+    endscript
+ 
+    # If fail2ban runs as non-root it still needs to have write access
+    # to logfiles.
+    create 640 {{ item.user }} adm
+
 }