# {{ ansible_managed }} [DEFAULT] ignoreip = {{ fail2ban_ignore_ips }} findtime = 3600 bantime = 86400 maxretry = 3 banaction = nftables-multiport banaction_allports = nftables-allports [sshd] enabled = true