feat: Add crowdsec to replace fail2ban

modules/crowdsec/default.nix

@@ -246,9 +246,16 @@ in
 
     environment = {
       systemPackages = [
-        # TODO(tlater): Figure out a way to get completions to work
-        cscli
+        # To add completions; sadly need to hand-roll this since
+        # neither `symlinkJoin` nor `buildEnv` have collision
+        # handling.
+        (pkgs.runCommandNoCCLocal "cscli" { } ''
+          mkdir -p $out
+          ln -s ${cscli}/bin $out/bin
+          ln -s ${cfg.package}/share $out/share
+        '')
       ];
+
       etc."crowdsec/config.yaml".source = settingsFormat.generate "crowdsec-settings.yaml" cfg.settings;
     };