App security on the Librem 5

Fail2ban is written in python. It just uses os.system to add and remove rules. Porting it to use nft would be an hours work at most.