diff --git a/hosts/raptus/fail2ban.nix b/hosts/raptus/fail2ban.nix
index 8d45fd8..3f78de1 100644
--- a/hosts/raptus/fail2ban.nix
+++ b/hosts/raptus/fail2ban.nix
@@ -1,9 +1,16 @@
-{ pkgs, ... }:
 {
-  config = {
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+let
+  inherit (lib) mkIf;
+  cfg = config.services.fail2ban;
+in
+{
+  config = mkIf cfg.enable {
     services.fail2ban = {
-      enable = false;
-
       extraPackages = with pkgs; [ nftables ];
       maxretry = 5;
       bantime = "10m";