{ config, lib, pkgs, ... }:

{
  services.fail2ban = {
    enable = true;
    ignoreIP = [ "127.0.0.1/8" "::1" "192.168.1.0/16" ];
    bantime-increment = { enable = true; };
  };
}