[Unit] After=nftables.service Wants=nftables.service [Service] ExecStartPost=/bin/bash -c "sleep 5 && chmod g+w /var/run/fail2ban/fail2ban.sock"