diff --git a/configuration.nix b/configuration.nix
index 3eb2b11..da04fad 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -81,6 +81,7 @@ in
     openFirewall = false;
 
   };
+  services.fail2ban.enable = true;
   programs.ssh = {
     pubkeyAcceptedKeyTypes = [ "ssh-ed25519" "ssh-rsa" "ecdsa-sha2-nistp256" ];
     hostKeyAlgorithms = [ "ssh-ed25519" "ssh-rsa" ];