version: "3.5"

services:
  fail2ban:
    image: crazymax/fail2ban:latest
    container_name: fail2ban
    network_mode: host
    cap_add:
      - NET_ADMIN
      - NET_RAW
    volumes:
      - "/share/docker_data/fail2ban/data:/data"
      - "/var/log:/var/log"
      #- "/share/docker_data/nextcloud/data/nextcloud.log:/nextcloud.log:ro"
      - type: bind
        source: /share/docker_data/nextcloud/data/nextcloud.log
        target: /nextcloud.log
        read_only: true
    env_file:
      - /data/fail2ban.env
    restart: always
    labels:
      com.centurylinklabs.watchtower.enable: true