diff --git a/users/sterni/modules/common.nix b/users/sterni/modules/common.nix
index 2c513acad..1ea1501f2 100644
--- a/users/sterni/modules/common.nix
+++ b/users/sterni/modules/common.nix
@@ -50,6 +50,8 @@ in
       '';
 
       openssh.enable = true;
+      # TODO(sterni): consider porting to reaction
+      fail2ban.enable = true;
     };
 
     programs = {