Add grafana

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/common/configs/system/sshd/default.nix

@@ -1,5 +1,13 @@
 { ... }:
 {
+  nixpkgs.overlays = [
+    (final: prev: {
+      fail2ban = prev.fail2ban.overrideAttrs (oldAttrs: {
+        patches = oldAttrs.patches or [ ] ++ [ ./remove-umask.patch ];
+      });
+    })
+  ];
+
   environment = {
     enableAllTerminfo = true;
     persistence."/persist/state"."/var/lib/fail2ban" = { };
@@ -24,4 +32,12 @@
       };
     };
   };
+
+  systemd.services.fail2ban.serviceConfig = {
+    User = "root";
+    Group = "fail2ban";
+    UMask = "0117";
+  };
+
+  users.groups.fail2ban = { };
 }