From c642150f73e5311fc5f081152080c23dabf2f960 Mon Sep 17 00:00:00 2001
From: rlei-odes <242280117+rlei-odes@users.noreply.github.com>
Date: Thu, 4 Jun 2026 19:18:53 +0200
Subject: [PATCH] fix: remove ssh_hardening dependency from fail2ban module
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

module_fail2ban() reads /etc/ssh/sshd_config directly to check whether
password auth is active and sets the SSH jail accordingly. It does not
rely on any state from ssh_hardening.

The dependency caused fail2ban to be silently skipped when ssh_hardening
was disabled — exactly when fail2ban is most needed (password auth still
on). Contradicts both the README and the module's own logic.
---
 fortress_improved.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fortress_improved.sh b/fortress_improved.sh
index 346891c..66dbfdb 100644
--- a/fortress_improved.sh
+++ b/fortress_improved.sh
@@ -171,7 +171,7 @@ declare -A MODULE_DEPS=(
     ["usb_protection"]=""
     ["filesystems"]=""
     ["package_verification"]="system_update"
-    ["fail2ban"]="system_update firewall ssh_hardening"
+    ["fail2ban"]="system_update firewall"
 )
 
 #=============================================================================