Ghost
released this
2026-07-02 13:32:19 +00:00
| 30 commits to main since this release
Fixed
--all left fail2ban installed but not running. fail2ban aborts the entire server (exit 255) if
any enabled jail's logpath is missing, and two were: the recidive jail's /var/log/fail2ban.log
never exists on Rocky (fail2ban logs to the journal), and on a fresh install Caddy's access log doesn't
exist yet when hardening runs (before the stack is built). Hardening now pre-creates both — sets
logtarget to a real file for recidive and touches the access log (owned by the rootless container
uid) — and verifies the service actually started, warning instead of falsely reporting ok.
Downloads