nixos/services/fail2ban/default.nix