{...}: {
  flake.modules.nixos.server = {
    services.fail2ban.enable = true;
    services.fail2ban.jails = {
      sshd = {
        enabled = true;
        filter = "sshd";
      };
    };
  };
}