diff --git a/ops/machines/whitby/default.nix b/ops/machines/whitby/default.nix
index 66a0fe1b8..0f2a43641 100644
--- a/ops/machines/whitby/default.nix
+++ b/ops/machines/whitby/default.nix
@@ -358,6 +358,8 @@ in {
     bindAddress = "localhost";
   };
 
+  services.fail2ban.enable = true;
+
   environment.systemPackages = with pkgs; [
     bb
     curl