From d04665107f8403706a362995ed2969ab791766f3 Mon Sep 17 00:00:00 2001
From: death916 <mail@trentnelson.dev>
Date: Fri, 16 Jan 2026 03:25:45 -0800
Subject: [PATCH] crowdsec

---
 modules/nixos/orac/crowdsec.nix | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/modules/nixos/orac/crowdsec.nix b/modules/nixos/orac/crowdsec.nix
index 140e322..61fcbe3 100644
--- a/modules/nixos/orac/crowdsec.nix
+++ b/modules/nixos/orac/crowdsec.nix
@@ -28,8 +28,17 @@
     };
 
     settings = {
-      general = {
-        api.server.enable = true;
+      common = {
+        log_media = "stdout";
+      };
+      api = {
+        client = {
+          credentials_path = "/var/lib/crowdsec/lapi-credentials.yaml";
+        };
+        server = {
+          enable = true;
+          listen_uri = "127.0.0.1:8080";
+        };
       };
     };
 
@@ -59,4 +68,8 @@
   };
 
   users.users.crowdsec.extraGroups = [ "systemd-journal" ];
+
+  systemd.tmpfiles.rules = [
+    "d /var/lib/crowdsec 0750 crowdsec crowdsec -"
+  ];
 }