{ ... }:
{
  environment.persistence."/persist/state"."/var/lib/fail2ban" = { };

  services.fail2ban = {
    enable = true;
    bantime = "24h";
    bantime-increment = {
      enable = true;
      maxtime = "720h";
      overalljails = true;
    };
  };
}