diff --git a/ansible.cfg b/ansible.cfg
index f38c9e0..de77da7 100644
--- a/ansible.cfg
+++ b/ansible.cfg
@@ -3,3 +3,4 @@ inventory = merlin
 stdout_callback = debug
 vault_password_file = .vault_pass.txt
 forks = 20
+host_key_checking = false
diff --git a/group_vars/horizon.yml b/group_vars/horizon.yml
new file mode 100644
index 0000000..2d4f7f5
--- /dev/null
+++ b/group_vars/horizon.yml
@@ -0,0 +1,2 @@
+---
+security_fail2ban_enabled: false
diff --git a/horizon.yml b/horizon.yml
index 6bd1997..e52a551 100644
--- a/horizon.yml
+++ b/horizon.yml
@@ -6,4 +6,5 @@
 - hosts: horizon
   become: True
   roles:
+     - geerlingguy.security
      - horizon