{
  inputs,
  config,
  pkgs,
  ...
}:
{
  # FIXME(TODO): fail2ban notifications sent to mqtt
  services.fail2ban = {
    enable = true;
    extraPackages = [
      pkgs.curl
    ];
    ignoreIP = [
      inputs.nix-secrets.network.primary.publicIP
    ];
  };
}