diff --git a/services/ssh.nix b/services/ssh.nix
index 9f15931..82f2594 100644
--- a/services/ssh.nix
+++ b/services/ssh.nix
@@ -33,4 +33,5 @@
   users.users.root.openssh.authorizedKeys.keys =
     config.users.users.${username}.openssh.authorizedKeys.keys;
 
+  services.fail2ban.enable = true;
 }