Throws a "option 'maxretry' in section 'DEFAULT' already exists" error on startup otherwise.
IS_TLS_ENABLED = true is implied if HOST's port is 465
These services log to syslog, so a log file doesn't exist, meaning fail2ban must scan the whole journal to seek authentication failure logs, which is slow! By specifying a journalmatch, it significantly narrows the scope of their searches.
With bitwarden_rs & gitea filters