diff --git a/nixos/hosts/canigou/default.nix b/nixos/hosts/canigou/default.nix
index 945d7c8..b777590 100644
--- a/nixos/hosts/canigou/default.nix
+++ b/nixos/hosts/canigou/default.nix
@@ -10,7 +10,7 @@ in
 
     ../../modules/nix.nix
     ../../shared/common.nix
-    ../../shared/fail2ban.nix
+    ../../shared/fail2ban
     ../../shared/garbage-collector.nix
     ../../shared/docker-swarm.nix
 
diff --git a/nixos/hosts/magenta/default.nix b/nixos/hosts/magenta/default.nix
index 68d7d8e..2ac1d82 100644
--- a/nixos/hosts/magenta/default.nix
+++ b/nixos/hosts/magenta/default.nix
@@ -10,7 +10,7 @@ in
 
     ../../modules/nix.nix
     ../../shared/common.nix
-    ../../shared/fail2ban.nix
+    ../../shared/fail2ban
     ../../shared/garbage-collector.nix
     ../../shared/docker-swarm.nix
 
diff --git a/nixos/shared/fail2ban/default.nix b/nixos/shared/fail2ban/default.nix
new file mode 100644
index 0000000..4d05ed5
--- /dev/null
+++ b/nixos/shared/fail2ban/default.nix
@@ -0,0 +1,8 @@
+{ ... }:
+
+{
+  imports = [
+    ./fail2ban.nix
+    ./fail2ban.secret.nix
+  ];
+}
diff --git a/nixos/shared/fail2ban.nix b/nixos/shared/fail2ban/fail2ban.nix
similarity index 100%
rename from nixos/shared/fail2ban.nix
rename to nixos/shared/fail2ban/fail2ban.nix
diff --git a/nixos/shared/fail2ban/fail2ban.secret.nix b/nixos/shared/fail2ban/fail2ban.secret.nix
new file mode 100644
index 0000000..a2130b8
Binary files /dev/null and b/nixos/shared/fail2ban/fail2ban.secret.nix differ