diff --git a/roles/server/gitea/meta/main.yml b/roles/server/gitea/meta/main.yml
index f06317f..cbb1371 100644
--- a/roles/server/gitea/meta/main.yml
+++ b/roles/server/gitea/meta/main.yml
@@ -7,6 +7,14 @@ dependencies:
   - role: misc/backup_files
     # domain
     backup_directory: "{{ gitea_repositories_directory }}"
+  - role: fail2ban/rule
+    # domain
+    unit_name: "{{ gitea_service_name }}"
+    fail_regex:
+      - '.* Failed authentication attempt for .* from <HOST>$'
+    max_retries: 8
+    find_time: "{{ 60 * 60 }}"
+    ban_time: "{{ 60 * 60 }}"
   - role: mysql/database
     # database_user
   - role: nginx/proxy