39 lines
1.0 KiB
YAML
39 lines
1.0 KiB
YAML
services:
|
|
crowdsec:
|
|
extends:
|
|
file: ${TEMPLATES_PATH}
|
|
service: default
|
|
container_name: crowdsec
|
|
image: crowdsecurity/crowdsec:latest
|
|
environment:
|
|
COLLECTIONS: "crowdsecurity/traefik crowdsecurity/http-cve"
|
|
expose:
|
|
- 8080
|
|
ports:
|
|
- 6060:6060
|
|
volumes:
|
|
- ${INFRA_PATH}/crowdsec/data:/var/lib/crowdsec/data
|
|
- ${INFRA_PATH}/crowdsec/config:/etc/crowdsec
|
|
- /var/log/auth.log:/var/log/auth.log:ro
|
|
- /var/log/crowdsec:/var/log/crowdsec:ro
|
|
labels:
|
|
# Watchtower
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
|
|
crowdsec-traefik-bouncer:
|
|
extends:
|
|
file: ${TEMPLATES_PATH}
|
|
service: default
|
|
image: fbonalair/traefik-crowdsec-bouncer:latest
|
|
container_name: bouncer-traefik
|
|
environment:
|
|
CROWDSEC_BOUNCER_API_KEY: ${CROWDSEC_API_KEY}
|
|
CROWDSEC_AGENT_HOST: crowdsec:8080
|
|
GIN_MODE: release
|
|
expose:
|
|
- 8080
|
|
depends_on:
|
|
- crowdsec
|
|
labels:
|
|
# Watchtower
|
|
- "com.centurylinklabs.watchtower.enable=true" |