version: "3.2"

services:
  fail2ban-input:
    image: crazymax/fail2ban:${F2BI_TAG:-latest}
    container_name: ${F2BI_CONTAINER_NAME:-fail2ban-input}
    restart: ${SRV_RESTART:-unless-stopped}
    network_mode: "host"
    cap_add:
      - NET_ADMIN
      - NET_RAW
    volumes:
      - ${LOCAL_STACK_DIR}/data-input:/data
      - /var/log:/var/log:ro
    env_file:
      - "./fail2ban.env"
    environment:
      - TZ=${TZ}
      - F2B_IPTABLES_CHAIN=INPUT

  fail2ban-docker:
    image: crazymax/fail2ban:${F2BD_TAG:-latest}
    container_name: ${F2BD_CONTAINER_NAME:-fail2ban-docker}
    restart: ${SRV_RESTART:-unless-stopped}
    network_mode: "host"
    cap_add:
      - NET_ADMIN
      - NET_RAW
    volumes:
      - ${LOCAL_STACK_DIR}/data-docker:/data
      - /var/log:/var/log:ro
    env_file:
      - "./fail2ban.env"
    environment:
      - TZ=${TZ}
      - F2B_IPTABLES_CHAIN=DOCKER-USER