[sshd]

enabled             = true
backend             = polling
filter              = %(__name__)s
logpath             = /var/log/auth.log

action              = nftables[type="multiport", name="%(__name__)s", port="22,8022", protocol="tcp"]
maxretry            = 5