nix-config/hosts/common/optional/fail2ban.nix