make sure ufw.log always exists for fail2ban (#937)

* make sure ufw.log always exists for fail2ban
nextcloud · Sep 5, 2019 · 954366e · 954366e
1 parent bf30c4f
commit 954366e
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/bin/ncp/SECURITY/fail2ban.sh b/bin/ncp/SECURITY/fail2ban.sh
@@ -52,8 +52,12 @@ EOF
 [INCLUDES]
 before = common.conf
 [Definition]
-failregex = UFW BLOCK.* SRC=
+failregex = UFW BLOCK.* SRC=<HOST>
 ignoreregex =
+EOF
+  cat > /etc/systemd/system/fail2ban.service.d/touch-ufw-log.conf <<EOF
+[Service]
+ExecStartPre=/bin/touch /var/log/ufw.log
 EOF
     chmod +x /etc/services-available.d/100fail2ban
   }