diff --git a/config/fail2ban/nextcloud.local b/config/fail2ban/nextcloud.local
new file mode 100644
index 0000000..cb56603
--- /dev/null
+++ b/config/fail2ban/nextcloud.local
@@ -0,0 +1,11 @@
+[nextcloud]
+ignoreip = 192.168.1.0/24
+backend = auto
+enabled = true
+port = 80,443
+protocol = tcp
+filter = nextcloud
+maxretry = 3
+bantime = 36000
+findtime = 36000
+logpath = /var/nextcloud/data/nextcloud.log
\ No newline at end of file