---
# System
timezone: "Europe/Berlin"

# Security
fail2ban_bantime: 600
fail2ban_findtime: 600
fail2ban_maxretry: 3

# Firewall ports to open
ufw_allowed_ports:
  - { port: 22, proto: tcp }  # SSH
  - { port: 80, proto: tcp }  # HTTP
  - { port: 443, proto: tcp } # HTTPS