diff --git a/nixos/hosts/reverse-proxy/crowdsec.nix b/nixos/hosts/reverse-proxy/crowdsec.nix
index 22a7d7d..68bce1f 100644
--- a/nixos/hosts/reverse-proxy/crowdsec.nix
+++ b/nixos/hosts/reverse-proxy/crowdsec.nix
@@ -12,6 +12,9 @@
 
   nixpkgs.overlays = [ inputs.crowdsec.overlays.default ];
 
+  environment.systemPackages = [
+    pkgs.ipset
+  ];
   sops.secrets = {
     "crowdsec/enrollKeyFile" = {
       owner = config.systemd.services.crowdsec.serviceConfig.User;