{...}: {
  imports = [./default.nix];
  services.fail2ban.jails.gitea = ''
    enabled = true
    filter = sshd
    ports = 30922
    backend = systemd
  '';
}