diff --git a/config-generator.nix b/config-generator.nix
index 1898e31..ca526cf 100644
--- a/config-generator.nix
+++ b/config-generator.nix
@@ -85,6 +85,7 @@ in
     })
     (mkIf (pfl.isDubronetwork && pfl.isServer) {
       r6d.config-generator.nix-serve-server = true;
+      r6d.config-generator.fail2ban = true;
     })
     (mkIf (pfl.isDubronetwork && pfl.isWorkstation) {
       r6d.config-generator.nix-serve-server = true;
@@ -92,6 +93,7 @@ in
     })
     (mkIf pfl.isPrunetwork {
       r6d.config-generator.auto-upgrade = true;
+      r6d.config-generator.fail2ban = true;
       r6d.config-generator.nix-serve-client = true;
       r6d.config-generator.swap = true;
     })