Add fail2ban for sshd on gemini

host_vars/gemini.archlinux.org

@@ -23,3 +23,8 @@ zabbix_agent_templates:
   - Template OS Linux
   - Template App Borg Backup
   - Template App Nginx
+
+fail2ban_jails:
+  sshd: true
+  postfix: false
+  dovecot: false

playbooks/gemini.archlinux.org.yml

@@ -15,3 +15,4 @@
     - { role: certbot }
     - { role: nginx }
     - { role: archive }
+    - { role: fail2ban }