1{...}: {
 2  networking.firewall.enable = true;
 3
 4  services.fail2ban = {
 5    enable = true;
 6    maxretry = 3;
 7    bantime = "10m";
 8    bantime-increment.enable = true;
 9    ignoreIP = [
10      "172.16.0.0/12"
11      "192.168.0.0/16"
12    ];
13  };
14}