---
- name: validate fail2ban config
  listen: "validate and restart fail2ban"
  become: true
  ansible.builtin.command: fail2ban-client -t
  register: f2b_validate
  changed_when: false

- name: restart fail2ban
  listen: "validate and restart fail2ban"
  become: true
  ansible.builtin.systemd:
    name: fail2ban
    state: restarted