> it already comes with sensible defaults Just two days ago I found out the sensible defaults doesn't include automagically enabling even the basic jails. The

> it already comes with sensible defaults Just two days ago I found out the sensible defaults doesn't include automagically enabling even the basic jails. The machine run for a year (or more) with enabled fail2ban which... did nothing. Not a Debian machine and it's entirely on me, but fail2ban setup is not "just apt install". You need to be at least somewhat familiar with it's lingo and the minimals on working with it.