diff --git a/playbooks/md.archlinux.org.yml b/playbooks/md.archlinux.org.yml
index 272853a9f167aaf207ef0247c8995f5cd84b005a..f10096660e9c00dd6015780d95a17f0b99176f8e 100644
--- a/playbooks/md.archlinux.org.yml
+++ b/playbooks/md.archlinux.org.yml
@@ -9,6 +9,7 @@
     - { role: firewalld }
     - { role: sshd }
     - { role: root_ssh }
+    - { role: fail2ban }
     - { role: borg_client, tags: ["borg"] }
     - { role: nginx }
     - { role: certbot }