diff --git a/hosts/wolumonde/default.nix b/hosts/wolumonde/default.nix
index 5a1295f..2776db2 100644
--- a/hosts/wolumonde/default.nix
+++ b/hosts/wolumonde/default.nix
@@ -10,6 +10,7 @@
     enable = true;
     passwordAuthentication = false;
   };
+  services.fail2ban.enable = true;
 
   users.users.root.openssh.authorizedKeys.keys = [
     (builtins.readFile "${inputs.self}/secrets/ssh-key.pub")