version: '2'

services:
  fail2ban:
    build: ./fail2ban
    image: fail2ban
    hostname: fail2ban
    container_name: fail2ban
    restart: always
    entrypoint:
      - /bin/bash
      - /etc/fail2ban/entrypoint.sh
    volumes:
      - ./fail2ban/entrypoint.sh:/etc/fail2ban/entrypoint.sh:ro
      - ./fail2ban/sshd_config:/etc/ssh/sshd_config:ro
      - ./fail2ban/fail2ban.log:/var/log/fail2ban.log
    cap_add:
      - NET_ADMIN
      - NET_RAW
    ports:
      - "22:22/tcp"
      - "2222:2222/tcp"
    networks:
      failnet:

networks:
  failnet: