diff --git a/base/activation-manuelle/service-fail2ban.nix b/base/activation-manuelle/service-fail2ban.nix
index 854210d..e103025 100644
--- a/base/activation-manuelle/service-fail2ban.nix
+++ b/base/activation-manuelle/service-fail2ban.nix
@@ -39,4 +39,7 @@ mkIf cfg.fail2ban {
       };
     };
   };
+
+  # https://github.com/NixOS/nixpkgs/issues/8437
+  services.fail2ban.jails.ssh-iptables = "enabled = true";
 }