[sshd]
enabled = true
bantime = -1
maxretry = 3
backend = systemd
{% if ansible_facts['os_family'] == "RedHat" %}
banaction = firewallcmd-ipset
{% endif %}