From 528a7a5abbf388def344387cd77f8f2fb54b532d Mon Sep 17 00:00:00 2001
From: sebres <serg.brester@sebres.de>
Date: Tue, 22 Nov 2016 11:14:27 +0100
Subject: [PATCH] systemd service update: - starting service in normal mode
 (without forking) - does not restart if service exited normally (exit-code 0,
 e.g. stopped via fail2ban-client) - does not restart if service can not start
 (exit-code 255, e.g. wrong configuration, etc.) - service can be additionally
 started/stopped with commands (fail2ban-client, fail2ban-server)

---
 files/fail2ban.service | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/files/fail2ban.service b/files/fail2ban.service
index e79faed1..5b661100 100644
--- a/files/fail2ban.service
+++ b/files/fail2ban.service
@@ -5,12 +5,13 @@ After=network.target iptables.service firewalld.service
 PartOf=iptables.service firewalld.service
 
 [Service]
-Type=forking
-ExecStart=/usr/bin/fail2ban-client -x start
+Type=simple
+ExecStart=/usr/bin/fail2ban-server -xf start
 ExecStop=/usr/bin/fail2ban-client stop
 ExecReload=/usr/bin/fail2ban-client reload
 PIDFile=/var/run/fail2ban/fail2ban.pid
-Restart=always
+Restart=on-failure
+RestartPreventExitStatus=0 255
 
 [Install]
 WantedBy=multi-user.target