Bookstack container auth log

The idea I’m working with here is trying to setup a fail2ban container, and I’m looking for where the logs for authentication are.

I’ve looked in /config/log/nginx, which contains access.log and error.log. access.log contains HTTP responses.

Am I looking in the right place here? Just a little lost on this bit.

I’m running this all with traefik 1.7, with docker-compose, can post additional info as requested.