{ outputs, ... }:
{
services.fail2ban = {
enable = true;
maxretry = 5;
bantime = "5m";
ignoreIP = [ "${outputs.ips.localSpan}.0/24" ];
};
}