/var/log/fail2ban.log {
	missingok
	notifempty
	create 640 root logs
	postrotate
		/usr/bin/fail2ban-client set logtarget /var/log/fail2ban.log 2>/dev/null || true
	endscript
}