crowdsec and traefik init

2026-01-13 23:18:01 +01:00
parent f0a7571682
commit 1e641f9225
8 changed files with 1029 additions and 28 deletions
--- a/services/crowdsec/crowdsec.yml
+++ b/services/crowdsec/crowdsec.yml
@@ -0,0 +1,23 @@
+services:
+  crowdsec:
+    extends:
+      file: ${TEMPLATES_PATH}
+      service: default
+    container_name: crowdsec
+    image: crowdsecurity/crowdsec:v1.7.4
+    environment:
+      COLLECTIONS: crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules crowdsecurity/http-cve
+      CROWDSEC_BOUNCER_API_KEY: ${CROWDSEC_API_KEY}
+      CUSTOM_HOSTNAME: crowdsec
+    ports:
+      - 6061:8080
+      - 6060:6060
+    networks:
+      - ip4net
+    volumes:
+      - ${SERVICE_PATH}/crowdsec/config/acquis.yaml:/etc/crowdsec/acquis.yaml:ro
+      - ${SERVICE_PATH}/crowdsec/config:/etc/crowdsec
+      - ${SERVICE_PATH}/crowdsec/data:/var/lib/crowdsec/data
+      - /var/log/traefik:/var/log/crowdsec:ro
+      - /var/log/syslog:/var/log/syslog:ro
+      - /var/log/kern.log:/var/log/kern.log:ro