Added fail2ban, though not sure its configured correctly yet

docker/rootfs/etc/s6-overlay/s6-rc.d/backend/run

@@ -1,4 +1,6 @@
 #!/command/with-contenv bash
+# shellcheck shell=bash
+
 set -e
 
 echo "❯ Starting backend ..."

docker/rootfs/etc/s6-overlay/s6-rc.d/fail2ban/run

@@ -0,0 +1,5 @@
+#!/command/with-contenv bash
+# shellcheck shell=bash
+
+echo "❯ Starting fail2ban ..."
+exec /usr/bin/fail2ban-client -c /fail2ban -x -vv -f start

docker/rootfs/etc/s6-overlay/s6-rc.d/fail2ban/type

@@ -0,0 +1 @@
+longrun

docker/rootfs/etc/s6-overlay/s6-rc.d/frontend/run

@@ -1,4 +1,6 @@
 #!/command/with-contenv bash
+# shellcheck shell=bash
+
 set -e
 
 # This service is DEVELOPMENT only.

docker/rootfs/etc/s6-overlay/s6-rc.d/nginx/run

@@ -1,4 +1,6 @@
 #!/command/with-contenv bash
+# shellcheck shell=bash
+
 set -e
 
 echo "❯ Starting nginx ..."

docker/rootfs/etc/s6-overlay/s6-rc.d/prepare/script.sh

@@ -1,4 +1,6 @@
 #!/command/with-contenv bash
+# shellcheck shell=bash
+
 set -e
 
 DATA_PATH=/data
@@ -47,6 +49,14 @@ chown -R npmuser:npmuser /var/log/nginx
 mkdir -p /tmp/npmuserhome
 chown -R npmuser:npmuser /tmp/npmuserhome
 
+# fail2ban configuration
+mkdir -p /fail2ban/{action.d,filter.d,jail.d,log}
+chown -R npmuser:npmuser /fail2ban
+mkdir -p /var/run/fail2ban
+mkdir -p /data/logs/fail2ban
+chown nobody:nogroup /data/logs/fail2ban
+chmod 02755 /data/logs/fail2ban
+
 echo
 echo "-------------------------------------
  _   _ ____  __  __

docker/rootfs/etc/s6-overlay/s6-rc.d/prepare/up

@@ -1 +1,2 @@
+# shellcheck shell=bash
 /etc/s6-overlay/s6-rc.d/prepare/script.sh