From 4054d983d96d46090fbfe2f41cb7974dd6668700 Mon Sep 17 00:00:00 2001
From: BhasherBEL <git.it@bhasher.com>
Date: Tue, 26 Dec 2023 14:45:04 +0100
Subject: [PATCH] Fail2ban

---
 bxl-shp/apps/docker-compose.vaultwarden.yaml |  3 +++
 bxl-shp/system/docker-compose.fail2ban.yaml  | 16 ++++++++++++++++
 2 files changed, 19 insertions(+)
 create mode 100644 bxl-shp/system/docker-compose.fail2ban.yaml

diff --git a/bxl-shp/apps/docker-compose.vaultwarden.yaml b/bxl-shp/apps/docker-compose.vaultwarden.yaml
index 0dea844..c5230cd 100644
--- a/bxl-shp/apps/docker-compose.vaultwarden.yaml
+++ b/bxl-shp/apps/docker-compose.vaultwarden.yaml
@@ -16,6 +16,9 @@ services:
     - SMTP_SECURITY=starttls
     - SMTP_USERNAME=${SMTP_USER}
     - SMTP_PASSWORD=${SMTP_PASSWORD}
+    - LOG_LEVEL=error
+    - EXTENDED_LOGGING=true
+    - LOG_FILE=/data/vaultwarden.log
     labels:
     - "traefik.enable=true"
     - "traefik.http.routers.vaultwarden.rule=Host(`vault.bhasher.com`)"
diff --git a/bxl-shp/system/docker-compose.fail2ban.yaml b/bxl-shp/system/docker-compose.fail2ban.yaml
new file mode 100644
index 0000000..72e42c9
--- /dev/null
+++ b/bxl-shp/system/docker-compose.fail2ban.yaml
@@ -0,0 +1,16 @@
+services:
+  fail2ban:
+    container_name: fail2ban
+    restart: unless-stopped
+    image: crazymax/fail2ban:latest
+    environment: 
+    - TZ=Europe/Paris
+    - PUID=1000
+    - PGID=1000
+    - F2B_DB_PURGE_AGE=30d
+    volumes:
+    - $DATA/fail2ban:/data
+    - $DATA/vaultwarden:/remotelogs/vaultwarden:ro
+    # authelia
+    # hass
+    # traefik ?