diff --git a/hosts/ami/default.nix b/hosts/ami/default.nix
index 67dc749..c5ed52a 100644
--- a/hosts/ami/default.nix
+++ b/hosts/ami/default.nix
@@ -39,7 +39,10 @@
     tree
   ];
 
-  services.syncthing.enable = true;
+  services = {
+    fail2ban.enable = true;
+    syncthing.enable = true;
+  };
 
   systemd = {
     services.register-thing = {