#!/usr/bin/env bash
set -euo pipefail

if ! command -v fail2ban-client &>/dev/null; then
  echo "fail2ban: missing"
  exit 1
fi

if systemctl is-active --quiet fail2ban; then
  echo "fail2ban: active"
  exit 0
fi

echo "fail2ban: inactive"
exit 1