fixup! fail2ban: Use a managed firewalld ipset

roles/fail2ban/tasks/main.yml

@@ -31,14 +31,13 @@
   with_items:
     - "fail2ban.local"
     - "jail.local"
-    - "firewallcmd-ipset-allports.conf"
   notify:
     - Restart fail2ban
 
 - name: Install firewallcmd-allports.local
   template:
-    src: "firewallcmd-allports.local.j2"
-    dest: "/etc/fail2ban/action.d/firewallcmd-allports.local"
+    src: "firewallcmd-ipset-allports.conf.j2"
+    dest: "/etc/fail2ban/action.d/firewallcmd-ipset-allports.conf"
     owner: "root"
     group: "root"
     mode: '0644'

roles/fail2ban/templates/firewallcmd-allports.local.j2

-#
-# {{ansible_managed}}
-#
-
-# creates the requisite chains in firewalld when fail2ban starts instead
-# of creating them on first use (ie, when first IP is banned)
-[Definition]
-actionstart_on_demand = false