--- host_base_packages: - fail2ban - unattended-upgrades - ufw - vim - curl - rsync fail2ban_backend: systemd