From eb04428dd4fc2a12c2a219dd3f9d0bbe40426728 Mon Sep 17 00:00:00 2001
From: decentral1se <cellarspoon@riseup.net>
Date: Tue, 16 Aug 2022 13:41:11 +0200
Subject: [PATCH] add note about fail2ban config

---
 README.md | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/README.md b/README.md
index b32f636..13e6c19 100644
--- a/README.md
+++ b/README.md
@@ -25,3 +25,20 @@
 
 [`abra`]: https://git.coopcloud.tech/coop-cloud/abra
 [`coop-cloud/traefik`]: https://git.coopcloud.tech/coop-cloud/traefik
+
+## Tips & Tricks
+
+### Wiring up `fail2ban`
+
+You need the following logging config:
+
+```
+USE_SYSLOG=true
+EXTENDED_LOGGING=true
+LOG_FILE=/data/vaultwarden.log
+LOG_LEVEL=warn
+```
+
+Then follow [this guide](https://github.com/dani-garcia/vaultwarden/wiki/Fail2Ban-Setup).
+
+And you must use `COMPOSE_FILE="$COMPOSE_FILE:compose.host.yml"` in your traefik config to get real IPs.