diff --git a/hosts/thrall/default.nix b/hosts/thrall/default.nix
index 8ef9c36..40d72b6 100644
--- a/hosts/thrall/default.nix
+++ b/hosts/thrall/default.nix
@@ -322,6 +322,10 @@ in {
   services.fail2ban = {
     enable = true;
     maxretry = 5;
+
+    bantime = "1h";
+    bantime-increment.enable = true;
+
     ignoreIP =
       [ "127.0.0.0/8" "195.90.211.228/22" "10.0.0.0/8" "192.168.0.0/16" ];