fail2ban: setup service

hosts/poseidon/default.nix

@@ -80,6 +80,10 @@ in
       repo = secrets.borg-backup-repo;
     };
 
+    fail2ban = {
+      enable = true;
+    };
+
     gitea = {
       enable = true;
       privatePort = 8082;

services/default.nix

@@ -4,6 +4,7 @@
   imports = [
     ./bitwarden_rs.nix
     ./borg-backup.nix
+    ./fail2ban.nix
     ./gitea.nix
     ./jellyfin.nix
     ./matrix.nix

services/fail2ban.nix

@@ -0,0 +1,14 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+let
+  cfg = config.my.services.fail2ban;
+in {
+  options.my.services.fail2ban = {
+    enable = mkEnableOption "Enable fail2ban";
+  };
+
+  config = mkIf cfg.enable {
+    services.fail2ban.enable = true;
+  };
+}