fix(crowdsec): small config tweaks

This commit is contained in:
Nicolas Meienberger 2024-05-07 21:19:13 +02:00
parent 2f9364efb6
commit 50ddf8d20b
2 changed files with 11 additions and 18 deletions

View File

@ -6,25 +6,21 @@
"exposable": true,
"id": "crowdsec",
"tipi_version": 1,
"version": "latest",
"categories": [
"security",
"utilities"
],
"version": "v1.6.1-2",
"categories": ["security", "utilities"],
"description": "CrowdSec is a free, modern & collaborative behavior detection engine, coupled with a global IP reputation network. It stacks on fail2ban's philosophy but is IPV6 compatible and 60x faster (Go vs Python), it uses Grok patterns to parse logs and YAML scenarios to identify behaviors. CrowdSec is engineered for modern Cloud / Containers / VM-based infrastructures (by decoupling detection and remediation). Once detected you can remedy threats with various bouncers (firewall block, nginx http 403, Captchas, etc.) while the aggressive IP can be sent to CrowdSec for curation before being shared among all users to further improve everyone's security. See FAQ or read below for more.",
"short_desc": "CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.",
"short_desc": "Participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.",
"author": "crowdsecurity",
"source": "https://github.com/crowdsecurity/crowdsec",
"form_fields": [
{
"type": "password",
"label": "Bouncer API Key (Important: For initial start, use a random string and change it later as specified in the description!",
"hint": "For initial start, use a random string and change it later as specified in the description!",
"label": "Bouncer API Key",
"placeholder": "Random string",
"required": true,
"env_variable": "CROWDSEC_BOUNCER_API_KEY"
}
],
"supported_architectures": [
"arm64",
"amd64"
]
}
"supported_architectures": ["arm64", "amd64"]
}

View File

@ -1,9 +1,7 @@
version: "3.8"
services:
crowdsec:
container_name: crowdsec
image: crowdsecurity/crowdsec:latest
image: crowdsecurity/crowdsec:v1.6.1-2
restart: unless-stopped
volumes:
- /etc/localtime:/etc/localtime:ro
@ -58,6 +56,8 @@ services:
volumes:
- ${APP_DATA_DIR}/data/crowdsec-dashboard/data:/data
- ${APP_DATA_DIR}/data/crowdsec/db:/metabase-data
networks:
- tipi_main_network
labels:
# Main
traefik.enable: true
@ -83,6 +83,3 @@ services:
traefik.http.routers.crowdsec-local.entrypoints: websecure
traefik.http.routers.crowdsec-local.service: crowdsec
traefik.http.routers.crowdsec-local.tls: true
networks:
backend_network: