{ pkgs, config, ... }: { services.fail2ban = { enable = true; }; }