{
  pkgs,
  config,
  lib,
  assets,
  ...
}:
with lib;
with types;
{

  options.features.network.sshguard = {
    enable = mkOption {
      type = bool;
      default = false;
    };
  };

  config = mkIf config.features.network.sshguard.enable {
    environment.systemPackages = [ pkgs.ipset ];
    services.sshguard.enable = true;
  };

}