{...}: {
  imports = [./default.nix];
  services.fail2ban.jails.traefik = ''
    enabled = true
    filter = traefik-auth
    ports = http,https
    backend = systemd
  '';
}