version: "3.5"

services:
  fail2ban:
    image: crazymax/fail2ban:latest
    container_name: fail2ban
    network_mode: "host"
    cap_add:
      - NET_ADMIN
      - NET_RAW
    volumes:
      - "/share/docker_data/fail2ban/data:/data"
      - "/var/log:/var/log"
      - "/share/docker_data/nextcloud/data/nextcloud.log:/nextcloud.log:ro"
    env_file:
      - "fail2ban.env"
    restart: always
    labels:
      com.centurylinklabs.watchtower.enable: true