Add fail2ban to stop these malicious ips ;-;

docker-compose.yml

@@ -5,6 +5,7 @@ networks:
 volumes:
     dbdata:
     uploads:
+    nginx-logs:
 
 services:
     nginx:
@@ -27,6 +28,7 @@ services:
             - ./certbot/conf:/etc/letsencrypt
             - ./certbot/www:/var/www/certbot
             - uploads:/uploads
+            - nginx-logs:/var/log/nginx
 
     certbot:
         image: certbot/certbot
@@ -123,3 +125,17 @@ services:
             - "2222:2222"
         depends_on:
             - db
+
+    fail2ban:
+        image: crazymax/fail2ban:latest
+        container_name: fail2ban
+        network_mode: host
+        cap_add:
+            - NET_ADMIN
+            - NET_RAW
+        restart: always
+        volumes:
+            - ./fail2ban/jail.d:/data/jail.d
+            - ./fail2ban/filter.d:/data/filter.d
+            - nginx-logs:/var/log/nginx:ro
+            - /var/log/auth.log:/var/log/auth.log:ro