#!/bin/sh

set -e

# Create fail2ban group if missing
if ! getent group fail2ban >/dev/null 2>&1; then
    addgroup -S fail2ban
fi

# Create fail2ban user if missing
if ! getent passwd fail2ban >/dev/null 2>&1; then
    adduser -S -D -H -h /var/lib/fail2ban -s /sbin/nologin \
        -G fail2ban fail2ban
fi

# Create required directories
install -d -m 0755 -o fail2ban -g fail2ban /var/lib/fail2ban
install -d -m 0755 /var/run/fail2ban
install -d -m 0755 /etc/fail2ban/jail.d

exit 0
