{ ... }:
{
  services.fail2ban = {
    enable = true;

    ignoreIP = [
      "zamok.crans.org"
    ];
  };

  services.openssh.settings.LogLevel = "VERBOSE";
}