death916/nixconfig
1
0
Fork 0
mirror of https://github.com/Death916/nixconfig.git synced 2026-04-10 02:54:39 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

crowdsec

Browse source
This commit is contained in:
death916 2026-01-16 03:34:36 -08:00
parent d04665107f
commit eefd8f3330
2 changed files with 1 additions and 76 deletions
Download patch file Download diff file Expand all files Collapse all files

75
modules/nixos/orac/crowdsec.nix
View file

@ -1,75 +0,0 @@
{ config, pkgs, ... }:
{
services.crowdsec = {
enable = true;
localConfig = {
acquisitions = [
{
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_UNIT=sshd.service" ];
labels.type = "syslog";
}
{
source = "journalctl";
journalctl_filter = [
"SYSLOG_IDENTIFIER=sudo"
"SYSLOG_IDENTIFIER=auth"
];
labels.type = "syslog";
}
{
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_UNIT=docker-traefik.service" ];
labels.type = "traefik";
}
];
};
settings = {
common = {
log_media = "stdout";
};
api = {
client = {
credentials_path = "/var/lib/crowdsec/lapi-credentials.yaml";
};
server = {
enable = true;
listen_uri = "127.0.0.1:8080";
};
};
};
hub = {
collections = [
"crowdsecurity/linux"
"crowdsecurity/sshd"
"crowdsecurity/traefik"
"crowdsecurity/http-cve"
];
};
};
services.crowdsec-firewall-bouncer = {
enable = true;
registerBouncer = {
enable = true;
};
settings = {
mode = "nftables";
log_level = "info";
update_frequency = "10s";
api_url = "http://127.0.0.1:8080/";
};
};
users.users.crowdsec.extraGroups = [ "systemd-journal" ];
systemd.tmpfiles.rules = [
"d /var/lib/crowdsec 0750 crowdsec crowdsec -"
];
}

2
nixos/orac.nix
View file

@ -9,7 +9,7 @@
../modules/nixos/orac/restic.nix
../modules/containers/docker/karakeep/docker-compose.nix
../modules/nixos/orac/monitoring.nix
../modules/nixos/orac/crowdsec.nix
../modules/containers/docker/crowdsec/crowdsec.nix
];
networking.firewall = {