# The [recidive] jail parses Fail2ban's own log file to ban repeat offenders.
# Every other jail here uses the systemd backend, but recidive cannot: it needs
# "NOTICE [jail] Ban <ip>" lines from a file. Distributions that default the
# logtarget to STDOUT/SYSLOG leave /var/log/fail2ban.log missing, and the jail
# then silently never fires. Pin the file target so recidive always has input.
[Definition]
logtarget = /var/log/fail2ban.log