@ -30,6 +30,12 @@ mkIf cfg.fail2ban {
maxretry = 3
destemail = ${destemail}
# https://github.com/Baughn/nixpkgs/blob/master/nixos/modules/services/security/fail2ban.nix
findtime = 600
backend = systemd
enabled = true
'';
ssh-route = ''
filter = sshd