Fail2ban

bxl-shp/apps/docker-compose.vaultwarden.yaml

@@ -16,6 +16,9 @@ services:
     - SMTP_SECURITY=starttls
     - SMTP_USERNAME=${SMTP_USER}
     - SMTP_PASSWORD=${SMTP_PASSWORD}
+    - LOG_LEVEL=error
+    - EXTENDED_LOGGING=true
+    - LOG_FILE=/data/vaultwarden.log
     labels:
     - "traefik.enable=true"
     - "traefik.http.routers.vaultwarden.rule=Host(`vault.bhasher.com`)"

bxl-shp/system/docker-compose.fail2ban.yaml

@@ -0,0 +1,16 @@
+services:
+  fail2ban:
+    container_name: fail2ban
+    restart: unless-stopped
+    image: crazymax/fail2ban:latest
+    environment: 
+    - TZ=Europe/Paris
+    - PUID=1000
+    - PGID=1000
+    - F2B_DB_PURGE_AGE=30d
+    volumes:
+    - $DATA/fail2ban:/data
+    - $DATA/vaultwarden:/remotelogs/vaultwarden:ro
+    # authelia
+    # hass
+    # traefik ?