version: '3.7'

services:
  fail2ban:
    image: lscr.io/linuxserver/fail2ban
    container_name: fail2ban
    restart: "${RESTART:-no}"
    hostname: fail2ban
    domainname: ${BASE_DOMAIN}
    cap_add:
      - NET_ADMIN
      - NET_RAW
    network_mode: host
    environment:
      - PUID=0
      - PGID=0
      - TZ=${TIMEZONE}
      - VERBOSITY=-v
    volumes:
      - ${BASE_DIR:-/srv}/fail2ban:/config
      - ./fail2ban/fail2ban.local:/config/fail2ban/fail2ban.local:ro
      - ./fail2ban/jail.local:/config/fail2ban/jail.local:ro
      - ./fail2ban/action.d/iptables.local:/config/fail2ban/action.d/iptables.local:ro
      - /var/log:/var/log:ro
      - ${BASE_DIR:-/srv}/forgejo/data/gitea/log:/remotelogs/gitea:ro
      - ${BASE_DIR:-/srv}/vaultwarden/data/logs:/remotelogs/vaultwarden:ro
      - ${BASE_DIR:-/srv}/mail/mail-logs:/remotelogs/mail:ro