[sshd]
enabled   = true
# See: /etc/fail2ban/filter.d/sshd.conf
filter    = sshd
# Integrate with nftables
banaction=nftables[type=allports]
backend   = systemd
maxretry  = {{ fail2ban_maxretry }}
findtime  = {{ fail2ban_findtime }}
bantime   = {{ fail2ban_bantime }}
ignoreip  = {{ fail2ban_ignoreip }}