see: http://undeadly.org/cgi?action=article&sid=2016011414

removed comment line in ssh_config

Ciphers, Kex and MAC can be set via defaults.var

use the world-wide pool by default, but specify north-america in
user.yml. Also, documentation. This way Sovereign will still behave the
same, but the NTP servers can be changed when desired.

Otherwise only pop and imap (un-secured) are blocked.
Which we don't use.

Don't mail them individually to the destemail. The destemail setting is thus no
longer used, but let's set it anyway to be clear where it will mail if you
change the action back.

Added friendly_networks variable to denote whitelisted networks

Instead of sending email to {{ admin_email }} we send them to root user.
These emails will be redirected to the appropriate user via
mail_virtual_aliases variables

Apticron is configured to send email to {{ admin_email }}

ignoreip field inside /etc/fail2ban/jail.local is populated with
server_ip_address variable

Removed your hardcoded server IP