{...}: {
  environment.persistence."/srv".directories = [
    {
      directory = "/var/lib/fail2ban";
      user = "fail2ban";
      group = "fail2ban";
      mode = "0700";
    }
  ];
}