diff --git a/roles/setup_nftables/files/post-hooks.d/fail2ban b/roles/setup_nftables/files/post-hooks.d/fail2ban
index 8898dbe..7609ad6 100644
--- a/roles/setup_nftables/files/post-hooks.d/fail2ban
+++ b/roles/setup_nftables/files/post-hooks.d/fail2ban
@@ -2,4 +2,4 @@
 
 # Restart fail2ban if needed
 
-[ "$(systemctl is-active fail2ban.service)" = inactive ] || fail2ban-client reload
+[ "$(systemctl is-active fail2ban.service)" = 'active' ] && fail2ban-client reload --restart