death916/nixconfig
1
0
Fork 0
mirror of https://github.com/Death916/nixconfig.git synced 2026-04-10 02:54:39 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

crowdsec vaultwarden

Browse source
This commit is contained in:
death916 2026-01-16 04:32:00 -08:00
parent fb4fd912ed
commit 17a4f1c929
2 changed files with 8 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/containers/docker/crowdsec/crowdsec.nix
View file

@ -20,6 +20,12 @@ let
type: syslog
---
source: journalctl
journalctl_filter:
- "_SYSTEMD_UNIT=vaultwarden.service"
labels:
type: vaultwarden
---
source: journalctl
journalctl_filter:
- "SYSLOG_IDENTIFIER=sudo"
- "SYSLOG_IDENTIFIER=auth"
@ -42,7 +48,7 @@ in
autoStart = true;
ports = [ "127.0.0.1:8080:8080" ];
environment = {
COLLECTIONS = "crowdsecurity/linux crowdsecurity/sshd crowdsecurity/traefik crowdsecurity/http-cve";
COLLECTIONS = "crowdsecurity/linux crowdsecurity/sshd crowdsecurity/traefik crowdsecurity/http-cve crowdsecurity/vaultwarden";
GID = "0";
};
volumes = [

2
modules/nixos/orac/services.nix
View file

@ -35,7 +35,7 @@
ROCKET_ADDRESS = "100.72.187.12";
ROCKET_PORT = 8222;
ROCKET_LOG = "critical";
ROCKET_LOG = "warn";
environmentFile = "/var/lib/vaultwarden/vault.env";
# This example assumes a mailserver running on localhost,
# thus without transport encryption.