{...}: {
  imports = [./default.nix];
  services.fail2ban.jails = {
    traefik-http = ''
      enabled = true
      filter = traefik-auth
      ports = http,https,2222
      backend = systemd
    '';
    traefik-ssh = ''
      enabled = true
      filter = sshd
      ports = 2222
      backend = systemd
    '';
  };
}