{
 services.fail2ban = {
   enable = true;
#   jails = {
#     lldap = {
#       settings = {
#         enabled = true;
#         filter = "lldap";
#         backend = "systemd";
#         journalmatch = "_SYSTEMD_UNIT=lldap.service";
#         maxretry = 5;
#         findtime = 600;
#         bantime = 3600;
#       };
#     };
#   };

#   jails = {
#    traefik-auth = ''
#      enabled = true
#      filter = traefik-auth
#      backend = systemd
#      journalmatch = _SYSTEMD_UNIT=traefik.service
#      maxretry = 3
#      bantime = 30
#      findtime = 600
#    '';
#  };
#
#  filters = {
#    traefik-auth = {
#      definition = ''
#        [Definition]
#        failregex = ^<HOST> -.*"(GET|POST).*" 401
#        ignoreregex =
#      '';
#    };
#  };
  };
}