diff --git a/machines/porthos/services.nix b/machines/porthos/services.nix
index 5cb8665..d0dbc82 100644
--- a/machines/porthos/services.nix
+++ b/machines/porthos/services.nix
@@ -34,6 +34,10 @@ in
       secretFile = secrets."drone/gitea".path;
       sharedSecretFile = secrets."drone/secret".path;
     };
+    # Auto-ban spammy bots and incorrect logins
+    fail2ban = {
+      enable = true;
+    };
     # Flood UI for transmission
     flood = {
       enable = true;