diff --git a/hosts/cube/grafana.nix b/hosts/cube/grafana.nix
index ceeea31..c4b49d1 100644
--- a/hosts/cube/grafana.nix
+++ b/hosts/cube/grafana.nix
@@ -9,8 +9,9 @@ in serverSystemConfiguration {
   age.secrets."cube/password.mail.grafana".owner = "grafana";
 
   services.fail2ban.jails.grafana.settings = {
-    filter   = "grafana";
-    maxretry = 3;
+    filter       = "grafana";
+    journalmatch = "_SYSTEMD_UNIT=grafana.service";
+    maxretry     = 3;
   };
 
   services.postgresql = {