Add jail for http users

Currently the tracker is hammered by a scraper which causes high load if we don't actually ban the user.

host_vars/security.archlinux.org/misc

 filesystem: btrfs
 wireguard_address: 10.0.0.24
 wireguard_public_key: CENgItOHJI/lLUNcUNpC+1oZJBvX/G+nemAKZYfCSCw=
+
+fail2ban_jails:
+  sshd: true
+  postfix: false
+  dovecot: false
+  nginx_limit_req: true