diff --git a/.gitignore b/.gitignore
index 1d4f346..51b188a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,6 +14,7 @@
 !modules/discord/
 !modules/dunst/
 !modules/endlessh/
+!modules/fail2ban/
 !modules/firefox/
 !modules/fonts/
 !modules/fuzzel/
diff --git a/modules/fail2ban/default.nix b/modules/fail2ban/default.nix
new file mode 100644
index 0000000..0b64ad3
--- /dev/null
+++ b/modules/fail2ban/default.nix
@@ -0,0 +1,10 @@
+{ ulib, ... }: with ulib;
+
+serverSystemConfiguration {
+  services.fail2ban = enabled {
+    bantime           = "24h";
+    bantime-increment = enabled {
+      maxtime = "7d";
+    };
+  };
+}