[recidive]
enabled = true
logpath  = /var/log/fail2ban.log
# Ban in both INPUT (host services like SSH) and DOCKER-USER (container services)
banaction = iptables-allports-dualchain
# Banned twice in two weeks, by any jail, is banned for four (novox/hq ADR 0179).
bantime  = 4w
findtime = 2w
maxretry = 2