diff --git a/host_vars/security.archlinux.org b/host_vars/security.archlinux.org
new file mode 100644
index 0000000000000000000000000000000000000000..95100c83dab4a9c25f43bdd3247a5230b05322c5
--- /dev/null
+++ b/host_vars/security.archlinux.org
@@ -0,0 +1,7 @@
+---
+filesystem: btrfs
+
+fail2ban_jails:
+  sshd: true
+  postfix: false
+  dovecot: false
diff --git a/hosts b/hosts
index 20c41f4ec8cb62a73e764e8cf3d901447b9703ce..cd4f7c3df5abd65199ae9f61833414663afd2af2 100644
--- a/hosts
+++ b/hosts
@@ -44,6 +44,7 @@ reproducible.archlinux.org
 mail.archlinux.org
 wiki.archlinux.org
 patchwork.archlinux.org
+security.archlinux.org
 
 [borg_hosts]
 prio.ch-s012.rsync.net
@@ -79,6 +80,7 @@ aur.archlinux.org
 aur-dev.archlinux.org
 wiki.archlinux.org
 patchwork.archlinux.org
+security.archlinux.org
 
 [buildservers]
 dragon.archlinux.org
@@ -132,6 +134,7 @@ luna.archlinux.org
 repro1.pkgbuild.com
 wiki.archlinux.org
 patchwork.archlinux.org
+security.archlinux.org
 
 [kape_servers]
 asia.mirror.pkgbuild.com