diff --git a/modules/services/fail2ban.nix b/modules/services/fail2ban.nix
index 66350bd3..e04ae9fa 100644
--- a/modules/services/fail2ban.nix
+++ b/modules/services/fail2ban.nix
@@ -10,6 +10,10 @@ inputs:
       inherit (inputs.lib) mkIf;
     in mkIf fail2ban.enable
     {
-      services.fail2ban.enable = true;
+      services.fail2ban =
+      {
+        enable = true;
+        ignoreIP = [ "127.0.0.0/8" "192.168.0.0/16" "vps6.chn.moe" ];
+      };
     };
 }