add note about fail2ban config

README.md

@@ -25,3 +25,20 @@
 
 [`abra`]: https://git.coopcloud.tech/coop-cloud/abra
 [`coop-cloud/traefik`]: https://git.coopcloud.tech/coop-cloud/traefik
+
+## Tips & Tricks
+
+### Wiring up `fail2ban`
+
+You need the following logging config:
+
+```
+USE_SYSLOG=true
+EXTENDED_LOGGING=true
+LOG_FILE=/data/vaultwarden.log
+LOG_LEVEL=warn
+```
+
+Then follow [this guide](https://github.com/dani-garcia/vaultwarden/wiki/Fail2Ban-Setup).
+
+And you must use `COMPOSE_FILE="$COMPOSE_FILE:compose.host.yml"` in your traefik config to get real IPs.