inputs:

{ config, ... }:

{
  services.fail2ban = {
    enable = true;
    ignoreIP = [ config.topology.mainVpn.subnet ];
  };
}