{ ... }:
{
services.fail2ban = {
enable = true;
maxretry = 5;
bantime = "5m";
};
environment.persistence."/persist".directories = [ "/var/lib/fail2ban" ];
}