version: '2'

services:
  fail2ban:
    build: ./fail2ban
    hostname: fail2ban
    container_name: fail2ban
    restart: always
    entrypoint:
      - /bin/bash
      - /etc/fail2ban/entrypoint.sh
    volumes:
      - ./fail2ban/entrypoint.sh:/etc/fail2ban/entrypoint.sh:ro
      - ./fail2ban/sshd_config:/etc/ssh/sshd_config:ro
    cap_add:
      - NET_ADMIN
      - NET_RAW
    network_mode: host