# Do not edit this file! Ansible will overwrite it.

[DEFAULT]

ignoreip  = {{ fail2ban.ignore }}
bantime   = {{ fail2ban.bantime }}
findtime  = {{ fail2ban.bantime }}
maxretry  = {{ fail2ban.maxretry }}
destemail = {{ fail2ban.email }}
sender    = root@<fq-hostname>
banaction = nftables-multiport
action    = %(action_)s

#+++++++++++++++ Jails

[sshd]
enabled   = true
port      = 0:65535
filter    = sshd
logpath   = %(sshd_log)s