{ ... }:
{
  services.fail2ban = {
    enable = true;
    maxretry = 5;
    bantime = "5m";
  };

  environment.persistence."/persist".directories = [ "/var/lib/fail2ban" ];
}