Ban SSH brute force with Fail2Ban on every server

Fail2Ban gets an SSH jail on every server kind and is installed on new servers. Scanner logins were filling sshd's connection slots and blocking Press's own Ansible runs.