{ pkgs, ... }:
{
  environment = {
    systemPackages = with pkgs; [
      kitty.terminfo
      tmux.terminfo
    ];

    persistence."/persist/state"."/var/lib/fail2ban" = { };
  };

  services = {
    openssh = {
      enable = true;
      settings = {
        PasswordAuthentication = false;
        PrintMotd = false;
      };
    };

    fail2ban = {
      enable = true;
      bantime = "24h";
      bantime-increment = {
        enable = true;
        maxtime = "720h";
        overalljails = true;
      };
    };
  };
}