Add fail2ban to services exposed to the internet

Lately we're seeing an increase of bots ssh login attempts in some of the services that are exposed to the internet. We should get a list of albs services exposed to the internet and add fail2ban where we can, and ask for inclusion in the case of those hosts that are not managed by us.