[sshd]
enabled = true
port = {{ ansible_port }}
findtime  = 1d
bantime   = 2w