{ config, lib, ... }: with lib; let cfg = config.modules.services.fail2ban; in { options.modules.services.fail2ban = { enable = mkEnableOption "fail2ban"; }; config = mkIf cfg.enable { services.fail2ban = { enable = true; }; }; }