diff --git a/hosts/_common/components/ssh.nix b/hosts/_common/components/ssh.nix
index 33ec80b..e569cf8 100644
--- a/hosts/_common/components/ssh.nix
+++ b/hosts/_common/components/ssh.nix
@@ -1,10 +1,19 @@
 { ... }:
 {
-  # Enable the OpenSSH daemon.
-  services.openssh.enable = true;
-  services.openssh.settings.PermitRootLogin = "yes";
+  # Use fail2ban
+  services.fail2ban = {
+    enable = true;
+  };
+
   # Open ports in the firewall.
   networking.firewall.allowedTCPPorts = [
     22 # sshd
   ];
+
+  # Enable the OpenSSH daemon.
+  services.openssh = {
+    enable = true;
+    logLevel = "VERBOSE";
+    settings.PermitRootLogin = "yes";
+  };
 }