diff --git a/group_vars/gitlab_runners.yml b/group_vars/gitlab_runners.yml
new file mode 100644
index 0000000000000000000000000000000000000000..1c98fb00e6ee21fa0f9948475bea59c92a9eb800
--- /dev/null
+++ b/group_vars/gitlab_runners.yml
@@ -0,0 +1,4 @@
+fail2ban_jails:
+  sshd: true
+  postfix: false
+  dovecot: false
diff --git a/playbooks/gitlab-runners.yml b/playbooks/gitlab-runners.yml
index f05e2b99db541a16647a0acca723188fd967f979..12f95d6f3e1f085d651c0ce2755fe0c5a93928c4 100644
--- a/playbooks/gitlab-runners.yml
+++ b/playbooks/gitlab-runners.yml
@@ -7,4 +7,5 @@
     - { role: firewalld }
     - { role: sshd }
     - { role: root_ssh }
+    - { role: fail2ban }
     - { role: gitlab-runner }