diff --git a/hosts/common/core/ssh.nix b/hosts/common/core/ssh.nix
index 6a770c6..18afcec 100644
--- a/hosts/common/core/ssh.nix
+++ b/hosts/common/core/ssh.nix
@@ -27,6 +27,9 @@
     settings = {
       PermitRootLogin = "no";
       PasswordAuthentication = false;
+      KbdInteractiveAuthentication = false;
     };
   };
+
+  services.fail2ban.enable = lib.mkDefault true; # This comes with an SSH jail preconfigured, expanded fail2ban can be found in modules/services
 }