I think it makes sense to move the IPS to the firewall section. It is kind of an extension of the firewall instead of the "Host IDS service" it has been before.
Done. https://git.ipfire.org/?p=people/stevee/ipfire-2.x.git;a=commit;h=1fbf0788bf66da1b93774a19d4b0db52b0fdfc73