diff --git a/f2bcfg/jail.local b/f2bcfg/jail.local
index c60c0b6..6c296f9 100644
--- a/f2bcfg/jail.local
+++ b/f2bcfg/jail.local
@@ -26,12 +26,6 @@ logpath = %(sshd_log)s
 backend = systemd
 enabled = true
 
-[portsentry]
-logpath  = /var/lib/portsentry/portsentry.history
-maxretry = 3
-backend = systemd
-#enabled = true
-
 [ufw]
 enabled = true
 filter = ufw.f2b
@@ -41,11 +35,26 @@ logpath = /var/log/ufw.log
 maxretry = 3
 bantime = 15m
 
+[portsentry]
+logpath  = /var/lib/portsentry/portsentry.history
+maxretry = 3
+backend = systemd
+#enabled = true
+
 [suricata]
 enabled = true
 filter = suricata.f2b
 logpath = /var/log/suricata/fast.log
 
+[gitea]
+enabled = true
+filter = gitea.f2b
+logpath = /var/snap/gitea/common/log/gitea.log
+maxretry = 3
+#findtime = 3600
+#bantime = 900
+action = iptables-allports
+
 [murmur]
 # AKA mumble-server
 port     = 64738