[bad-auth]
enabled = true
backend = systemd
filter = bad-auth
bantime = 1h
bantime.increment = true
bantime.factor = 2
bantime.maxtime = 128w
findtime = 3600
maxretry = 3
action = docker-action