diff --git a/playbooks/all-hosts-basic.yml b/playbooks/all-hosts-basic.yml
index 943c40520416b098a6fc469ed27f004934b69a98..61e3dfd3521468ebcdc247d5004ae78c6f47f0bd 100644
--- a/playbooks/all-hosts-basic.yml
+++ b/playbooks/all-hosts-basic.yml
@@ -13,3 +13,4 @@
     - { role: root_ssh }
     - { role: borg_client, tags: ["borg"], when: "'borg_clients' in group_names" }
     - { role: hardening }
+    - { role: fail2ban }