prevent the trailing ; after the subchain

diff --git a/modules/fail2ban/manifests/init.pp b/modules/fail2ban/manifests/init.pp
index 8d64034..74a650b 100644 (file)
--- a/modules/fail2ban/manifests/init.pp
+++ b/modules/fail2ban/manifests/init.pp
@@ -24,7 +24,8 @@ class fail2ban {
                description => 'f2b master rule',
                chain       => 'INPUT',
                domain      => '(ip ip6)',
-               rule        => 'saddr 0/0 @subchain "dsa-f2b" {}'
+               rule        => 'saddr 0/0 @subchain "dsa-f2b" {}',
+               notarule    => true,
        }
 
        # XXX Maybe this will be automatically done in buster, it is certainly needed in stretch. So maybe:  versioncmp($::lsbmajdistrelease, '9') <= 0