diff --git a/hosts/hades/default.nix b/hosts/hades/default.nix
index 95e529a..7873034 100644
--- a/hosts/hades/default.nix
+++ b/hosts/hades/default.nix
@@ -59,6 +59,8 @@ in {
       enable = true;
       exitNode = true;
     };
+
+    fail2ban.enable = true;
   };
 
   # Enable the OpenSSH daemon.