2025-02-16 11:26:45 -05:00
|
|
|
services:
|
|
|
|
|
crowdsec:
|
|
|
|
|
image: crowdsecurity/crowdsec:latest
|
|
|
|
|
container_name: crowdsec
|
|
|
|
|
environment:
|
|
|
|
|
GID: "1000"
|
|
|
|
|
COLLECTIONS: crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules
|
|
|
|
|
ENROLL_INSTANCE_NAME: "pangolin-crowdsec"
|
|
|
|
|
PARSERS: crowdsecurity/whitelists
|
|
|
|
|
ACQUIRE_FILES: "/var/log/traefik/*.log"
|
|
|
|
|
ENROLL_TAGS: docker
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: ["CMD", "cscli", "capi", "status"]
|
|
|
|
|
labels:
|
|
|
|
|
- "traefik.enable=false" # Disable traefik for crowdsec
|
|
|
|
|
volumes:
|
|
|
|
|
# crowdsec container data
|
|
|
|
|
- ./config/crowdsec:/etc/crowdsec # crowdsec config
|
|
|
|
|
- ./config/crowdsec/db:/var/lib/crowdsec/data # crowdsec db
|
|
|
|
|
# log bind mounts into crowdsec
|
|
|
|
|
- ./config/crowdsec_logs/auth.log:/var/log/auth.log:ro # auth.log
|
|
|
|
|
- ./config/crowdsec_logs/syslog:/var/log/syslog:ro # syslog
|
|
|
|
|
- ./config/crowdsec_logs:/var/log # crowdsec logs
|
|
|
|
|
- ./config/traefik/logs:/var/log/traefik # traefik logs
|
2025-03-04 23:52:37 -05:00
|
|
|
ports:
|
|
|
|
|
- 6060:6060 # metrics endpoint for prometheus
|
|
|
|
|
expose:
|
|
|
|
|
- 6060 # metrics endpoint for prometheus
|
2025-02-16 11:26:45 -05:00
|
|
|
restart: unless-stopped
|
|
|
|
|
command: -t # Add test config flag to verify configuration
|
