Honest question, is there a good default config available somewhere or is what apt install fail2ban does good to go? All the tutorials I’ve found have left it to the reader to configure their own rules.

I’ll bring this up to the others.

No, you are not understanding correctly.