[sshd]
enabled   = true
filter    = sshd
banaction = ufw
backend   = systemd
maxretry  = 5
findtime  = 10m
bantime   = 10m
ignoreip  = 127.0.0.1/8 ::1