{ config, lib, pkgs, ... }: { services.fail2ban = { enable = true; ignoreIP = [ "127.0.0.1/8" "::1" "192.168.1.0/16" ]; bantime-increment = { enable = true; }; }; }