Remove more persistence references and move to a simpler, global system

system/services/general/ssh/default.nix

@@ -1,22 +1,20 @@
 { lib, ... }:
 {
-  imports = [ ./fail2ban ];
-
-  services.openssh = {
-    enable = true;
-    settings = {
-      PermitRootLogin = lib.mkForce "no";
-      PrintLastLog = "no";
-      PasswordAuthentication = false;
-      UsePAM = false;
-      X11Forwarding = false;
+  services = {
+    openssh = {
+      enable = true;
+      settings = {
+        PermitRootLogin = lib.mkForce "no";
+        PrintLastLog = "no";
+        PasswordAuthentication = false;
+        UsePAM = false;
+        X11Forwarding = false;
+      };
+    };
+    fail2ban = {
+      enable = true;
+      maxretry = 5;
+      bantime = "10m";
     };
   };
-
-  environment.persistence."/persist".files = [
-    "/etc/ssh/ssh_host_ed25519_key"
-    "/etc/ssh/ssh_host_ed25519_key.pub"
-    "/etc/ssh/ssh_host_rsa_key"
-    "/etc/ssh/ssh_host_rsa_key.pub"
-  ];
 }