diff --git a/docker-compose.yml b/docker-compose.yml
index 2785617..4b8ddb7 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -134,8 +134,8 @@ services:
       - /export/docker/container/letsencrypt/etc:/etc/letsencrypt
     environment:
       - ENABLE_SPAMASSASSIN=1
-      - ENABLE_CLAMAV=0
-      - ENABLE_FAIL2BAN=0
+      - ENABLE_CLAMAV=1
+      - ENABLE_FAIL2BAN=1
       - ENABLE_POSTGREY=0
       - SPOOF_PROTECTION=1
       - ONE_DIR=1
@@ -266,8 +266,6 @@ services:
       - /myth/opt/plex/config:/config
       - /myth/opt/plex/transcode:/transcode
       - /myth/opt/storage:/data
-    devices:
-      - /dev/dvb:/dev/dvb
     ports:
       - "32400:32400"
 #      - "1900:1900"
@@ -290,6 +288,18 @@ services:
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
 
+  hass:
+    container_name: hass
+    image: homeassistant/home-assistant:stable
+    volumes:
+      - /export/docker/container/hass:/config
+    environment:
+      - TZ=Australia/Melbourne
+    restart: always
+    ports:
+      - "8123:8123"
+    network_mode: host
+
 # override the default network to use the "user-generated" plex-net
 # weirdy, ONLY, user-generated networks allow DNS service discovery
 # (e.g. comms between containers on the 'name', e.g. nzbget resolves to the