diff --git a/fail2ban/docker-compose.yaml b/fail2ban/docker-compose.yaml
new file mode 100644
index 0000000..b5c8914
--- /dev/null
+++ b/fail2ban/docker-compose.yaml
@@ -0,0 +1,19 @@
+version: "3.5"
+
+services:
+  fail2ban:
+    image: crazymax/fail2ban:latest
+    container_name: fail2ban
+    network_mode: "host"
+    cap_add:
+      - NET_ADMIN
+      - NET_RAW
+    volumes:
+      - "/share/docker_data/fail2ban/data:/data"
+      - "/var/log:/var/log"
+      - "/share/docker_data/nextcloud/data/nextcloud.log:/nextcloud.log:ro"
+    env_file:
+      - "/data/fail2ban.env"
+    restart: always
+    labels:
+      com.centurylinklabs.watchtower.enable: true