[sshd]
enabled  = true
port     = 22
maxretry = 3
bantime  = 24h

[pam-generic]
enabled      = true
maxretry     = 3
# facility 10 = auth/security (PAM, su, sudo…)
journalmatch = SYSLOG_FACILITY=10

[mysqld-auth]
enabled      = true
journalmatch = _SYSTEMD_UNIT=mariadb.service