diff --git a/common/configuration.nix b/common/configuration.nix
index c4fe092..57f7114 100644
--- a/common/configuration.nix
+++ b/common/configuration.nix
@@ -10,6 +10,8 @@
   services.openssh.enable = true;
   services.openssh.settings.PermitRootLogin = lib.mkDefault "no";
 
+  services.fail2ban.enable = true;
+
   # Activate nix flakes.
   nix.settings.experimental-features = [ "nix-command" "flakes" ];