diff --git a/scripts/upgrade b/scripts/upgrade
index 7acd057..c61ebcb 100755
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -100,6 +100,14 @@ ynh_script_progression --message="Upgrading logrotate configuration..."
 # Use logrotate to manage app-specific logfile(s)
 ynh_use_logrotate --non-append
 
+#=================================================
+# SETUP FAIL2BAN
+#=================================================
+ynh_script_progression --message="Upgrading fail2ban configuration..."
+
+# Create a dedicated Fail2Ban config
+ynh_add_fail2ban_config --logpath="/var/log/${domain}-access.log" --failregex="<HOST> .* \"GET /api/.*\" 401" --max_retry=5
+
 #=================================================
 # SPECIFIC UPGRADE
 #=================================================