Turn Fail2ban setup into a module We now: * Don't have a large class outside a module * Build "bad SSH users" config from a list (easier to understand/see diffs in than a long line) * Use modern EPP files

# Based on https://www.nlnetlabs.nl/documentation/unbound/howto-setup/
server:
	interface: 127.0.0.1
	interface: ::1
	access-control: 127.0.0.0/24 allow
	access-control: ::1 allow
        verbosity: 1