[DEFAULT]
backend = systemd
bantime = 1h
findtime = 10m
maxretry = 5

[sshd]
enabled = true
port = 22
banaction = nftables-multiport
ignoreip = 127.0.0.1/8 ::1 100.91.249.119