diff --git a/os/hs/configuration.nix b/os/hs/configuration.nix
index 6a6d0db..fe957b0 100644
--- a/os/hs/configuration.nix
+++ b/os/hs/configuration.nix
@@ -64,6 +64,8 @@ in {
   ];
   networking.firewall.allowedUDPPorts = [ 25565 ];
 
+  services.fail2banenable = true;
+
   networking.interfaces.enp10s0.wakeOnLan.enable = true;
   systemd.services.ragnamod = {
     enable = false;