diff --git a/hosts/test-nixos/default.nix b/hosts/test-nixos/default.nix
index 6bf5ec3..5ed97a3 100644
--- a/hosts/test-nixos/default.nix
+++ b/hosts/test-nixos/default.nix
@@ -17,6 +17,15 @@
   qemu.enable = true;
   spice.enable = true;
 
+  sops.secrets = {
+    "crowdsec/firewallBouncerLapiKey" = { };
+  };
+
+  crowdsec-firewall-bouncer = {
+    enable = true;
+    apiKeyFile = config.sops.secrets."crowdsec/firewallBouncerLapiKey";
+  };
+
   base.userSSHKeys = [
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILiUy2yjIkdryH7pYMdkCNryy9gceqXJ7bhtMvvpPBIk etorres@xenon"
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILPByHF+TF/4rsMtZ+HxZfwmNi83sia5t+OHjn8X7BHn etorres@radon"