{
  lib,
  config,
  ...
}: {
  config = lib.mkIf (config.services.actual.enable && config.services.fail2ban.enable) {
    # TODO: configuration for fail2ban for actual
  };
}