[DEFAULT]
backend = systemd

banaction = iptables-multiport
banaction_allports = iptables-allports

ignoreip = 127.0.0.1/8 ::1 \
           10.0.0.0/8 \
           172.16.0.0/12 \
           192.168.0.0/16

findtime = 10m

maxretry = 5

bantime = 1h

bantime.increment = true

bantime.factor = 2

bantime.formula = bantime * (1<<(ban.Count if ban.Count<20 else 20)) * banFactor

bantime.maxtime = 4w

usedns = no

allowipv6 = auto

dbfile = /var/lib/fail2ban/fail2ban.sqlite3

dbpurgeage = 365d

loglevel = info

[sshd]

enabled = true
port = ssh
mode = aggressive
backend = systemd
maxretry = 3
findtime = 10m
bantime = 2h

[recidive]

enabled = true 

backend = systemd

logpath = journal

findtime = 1d
bantime = 30d
maxretry = 5