diff --git a/manifests/params.pp b/manifests/params.pp
index 8092d64..a6a0556 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -104,57 +104,56 @@
 class confdroid_fail2ban::params (
 
 # installation
-  String $fn_pkg_ensure           = 'present',
-  Array $fn_reqpackages           = ['fail2ban','fail2ban-firewalld',
+  String $fn_pkg_ensure               = 'present',
+  Array $fn_reqpackages               = ['fail2ban','fail2ban-firewalld',
   'fail2ban-sendmail','fail2ban-server.noarch','whois'],
 
-  Boolean $fn_manage_config       = true,
-  String $fn_enable_service       = 'running',
+  Boolean $fn_manage_config           = true,
+  String $fn_enable_service           = 'running',
 
 # fail2ban.conf/local
 
-  String $fn_loglevel             = 'INFO',
-  String $fn_logtarget            = 'SYSLOG',
-  String $fn_syslogsocket         = 'auto',
-  String $fn_socket               = '/var/run/fail2ban/fail2ban.sock',
-  String $fn_pidfile              = '/var/run/fail2ban/fail2ban.pid',
-  String $fn_dbfile               = '/var/lib/fail2ban/fail2ban.sqlite3',
-  String $fn_dbpurgeage           = '86400',
+  String $fn_loglevel                 = 'INFO',
+  String $fn_logtarget                = 'SYSLOG',
+  String $fn_syslogsocket             = 'auto',
+  String $fn_socket                   = '/var/run/fail2ban/fail2ban.sock',
+  String $fn_pidfile                  = '/var/run/fail2ban/fail2ban.pid',
+  String $fn_dbfile                   = '/var/lib/fail2ban/fail2ban.sqlite3',
+  String $fn_dbpurgeage               = '86400',
 
 # jail.conf/local
-  String $fn_ignoreip             = '127.0.0.1/8',
-  String $fn_ignorecommand        = '',
-  String $fn_bantime              = '600',
-  String $fn_findtime             = '600',
-  String $fn_maxretry             = '5',
-  String $fn_backend              = 'auto',
-  String $fn_usedns               = 'warn',
-  String $fn_logencoding          = 'auto',
-  Boolean $fn_enabled             = false,
-  String $fn_filter               = '%(__name__)s',
-  String $fn_destemail            = 'root@localhost',
-  #String $fn_sender               = "fail2ban@${fqdn}",
-  String $fn_mta                  = 'sendmail',
-  String $fn_protocol             = 'tcp',
-  String $fn_chain                = 'INPUT',
-  String $fn_port                 = '0:65535',
-  String $fn_fail2ban_agent       = 'Fail2Ban/%(fail2ban_version)s',
-  String $fn_banaction            = 'iptables-multiport',
-  String $fn_banaction_allports   = 'iptables-allports',
-  String $fn_action_              = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]',
-  String $fn_action_mw            = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
+  String $fn_ignoreip                 = '127.0.0.1/8',
+  Optional[String] $fn_ignorecommand  = '',
+  String $fn_bantime                  = '600',
+  String $fn_findtime                 = '600',
+  String $fn_maxretry                 = '5',
+  String $fn_backend                  = 'auto',
+  String $fn_usedns                   = 'warn',
+  String $fn_logencoding              = 'auto',
+  Boolean $fn_enabled                 = false,
+  String $fn_filter                   = '%(__name__)s',
+  String $fn_destemail                = 'root@localhost',
+  String $fn_mta                      = 'sendmail',
+  String $fn_protocol                 = 'tcp',
+  String $fn_chain                    = 'INPUT',
+  String $fn_port                     = '0:65535',
+  String $fn_fail2ban_agent           = 'Fail2Ban/%(fail2ban_version)s',
+  String $fn_banaction                = 'iptables-multiport',
+  String $fn_banaction_allports       = 'iptables-allports',
+  String $fn_action_                  = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]',
+  String $fn_action_mw                = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
                         %(mta)s-whois[name=%(__name__)s,  sender="%(sender)s", dest="%(destemail)s", protocol="%(protocol)s", chain="%(chain)s"]',
-  String $fn_action_mwl           = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
+  String $fn_action_mwl               = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]'
                         %(mta)s-whois-lines[name=%(__name__)s, sender="%(sender)s", dest="%(destemail)s", logpath=%(logpath)s, chain="%(chain)s"]',
-  String $fn_action_xarf          = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
+  String $fn_action_xarf              = '%(banaction)s[name=%(__name__)s, bantime="%(bantime)s", port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
                         xarf-login-attack[service=%(__name__)s, sender="%(sender)s", logpath=%(logpath)s, port="%(port)s"]',
-  String $fn_action_cf_mwl        = 'cloudflare[cfuser="%(cfemail)s", cftoken="%(cfapikey)s"]
+  String $fn_action_cf_mwl            = 'cloudflare[cfuser="%(cfemail)s", cftoken="%(cfapikey)s"]
                         %(mta)s-whois-lines[name=%(__name__)s, sender="%(sender)s", dest="%(destemail)s", logpath=%(logpath)s, chain="%(chain)s"]',
-  String $fn_action_blocklist_de  = 'blocklist_de[email="%(sender)s", service=%(filter)s, apikey="%(blocklist_de_apikey)s", agent="%(fail2ban_agent)s"]',
-  String $fn_action_badips        = 'badips.py[category="%(__name__)s", banaction="%(banaction)s", agent="%(fail2ban_agent)s"]',
-  String $fn_action_badips_report = 'badips[category="%(__name__)s", agent="%(fail2ban_agent)s"]',
-  String $fn_default_action       = 'action_',
-  String $fn_jail_paths           = 'fedora',
+  String $fn_action_blocklist_de      = 'blocklist_de[email="%(sender)s", service=%(filter)s, apikey="%(blocklist_de_apikey)s", agent="%(fail2ban_agent)s"]',
+  String $fn_action_badips            = 'badips.py[category="%(__name__)s", banaction="%(banaction)s", agent="%(fail2ban_agent)s"]',
+  String $fn_action_badips_report     = 'badips[category="%(__name__)s", agent="%(fail2ban_agent)s"]',
+  String $fn_default_action           = 'action_',
+  String $fn_jail_paths               = 'fedora',
 
 ) {
 # shortcuts