diff --git a/README.md b/README.md
index b32f636..13e6c19 100644
--- a/README.md
+++ b/README.md
@@ -25,3 +25,20 @@
 
 [`abra`]: https://git.coopcloud.tech/coop-cloud/abra
 [`coop-cloud/traefik`]: https://git.coopcloud.tech/coop-cloud/traefik
+
+## Tips & Tricks
+
+### Wiring up `fail2ban`
+
+You need the following logging config:
+
+```
+USE_SYSLOG=true
+EXTENDED_LOGGING=true
+LOG_FILE=/data/vaultwarden.log
+LOG_LEVEL=warn
+```
+
+Then follow [this guide](https://github.com/dani-garcia/vaultwarden/wiki/Fail2Ban-Setup).
+
+And you must use `COMPOSE_FILE="$COMPOSE_FILE:compose.host.yml"` in your traefik config to get real IPs.