diff --git a/docs/hardening/anti-bruteforce/wp-auth.conf b/docs/hardening/anti-bruteforce/wp-auth.conf
index 0c0700189feb9908f640b3e61340496e9b661719..2acad450ca7f5f8a41f38a4e45a91418f9478c60 100644
--- a/docs/hardening/anti-bruteforce/wp-auth.conf
+++ b/docs/hardening/anti-bruteforce/wp-auth.conf
@@ -1,2 +1,5 @@
+#
+# This goes into /etc/fail2ban/filter.d/wp-auth.conf
+#
 [Definition]
  failregex = ^<HOST> .* "POST /wp-login.php
\ No newline at end of file