chore 📦: Update file path for non-clustered environments in fail2ban.yml

This commit updates the file path configuration for non-clustered environments in the `fail2ban.yml` file. This ensures that the correct paths are used when running fail2ban outside of a clustered environment.

tasks/fail2ban.yml

@@ -94,7 +94,6 @@
       backend  = systemd
       banaction = {% if (clustered.stat.exists | default(false)) %} proxmox-fw{% else %} iptables-multiport{% endif %}
       ignoreip = 127.0.0.1/8 192.168.2.0/24
-      # {% if pmxcfs_running.stat.exists %} {{ corosync_networks | join(' ') }}{% endif %}
 
       #################################################
       # SSH
@@ -153,10 +152,16 @@
       {{
         '/etc/pve/firewall/cluster.fw'
         if clustered.stat.exists
-        else '/etc/pve/nodes/' + pve_node + '.fw'
+        else '/etc/pve/nodes/' + pve_node + '/host.fw'
       }}
   when: pve_installed.stat.exists | default(false)
 
+- name: fail2ban | Show firewall config path
+  ansible.builtin.debug:
+    msg: >
+      WARNING: Proxmox firewall config path is:  {{ pve_firewall_config}}
+  when: pve_firewall_config is defined
+
 #################################################
 # Detect firewall configuration
 #################################################
@@ -173,15 +178,19 @@
   register: fw_content
   when: fw_stat.stat.exists | default(false)
 
+- name: fail2ban | Debug config contents
+  ansible.builtin.debug:
+    msg: >
+      {{ fw_content }}
+  when: fw_stat.stat.exists | default(false)
+
 - name: fail2ban | Determine if firewall enabled
   ansible.builtin.set_fact:
     pve_firewall_enabled: >-
       {{
-        (fw_stat.stat.exists | default(false)) and
+        fw_stat.stat.exists and
-        (
+        (fw_content.content | b64decode)
-          (fw_content.content | default('') | b64decode)
+        is search('^enable:\s*1$', multiline=True)
-          is search('enable:\s*1')
-        )
       }}
 
 - name: fail2ban | Warn if firewall not enabled