Wekuz/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

temp: Crowdsec

Browse source
This commit is contained in:
Wekuz 2026-07-05 22:59:30 +03:00
parent 77571565c2
commit 2b949f04ce
Signed by: Wekuz
GPG key ID: 2E502F2AABD32DF9
1 changed files with 65 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

65
hosts/plexy/default.nix
View file

@ -143,6 +143,71 @@
};
};
};
crowdsec = {
enable = true;
autoUpdateService = true;
settings = {
lapi.credentialsFile = "/var/lib/crowdsec/lapi.yaml";
capi.credentialsFile = "/var/lib/crowdsec/capi.yaml";
general = {
api.server = {
enable = true;
listen_uri = "http://127.0.0.1:8080";
};
prometheus.enabled = false;
};
};
hub.collections = [
"crowdsecurity/linux"
"crowdsecurity/sshd"
"crowdsecurity/base-http-scenarios"
"crowdsecurity/caddy"
"Dominic-Wagner/vaultwarden"
"LePresidente/jellyfin"
"LePresidente/jellyseerr"
"crowdsecurity/whitelists"
"crowdsecurity/whitelist-good-actors"
];
localConfig.acquisitions = [
{
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_UNIT=sshd.service" ];
labels.type = "syslog";
}
{
source = "journalctl";
journalctl_filter = [ "-k" ];
labels.type = "syslog";
}
{
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_UNIT=caddy.service" ];
labels.type = "caddy";
}
{
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_UNIT=vaultwarden.service" ];
labels.type = "Vaultwarden";
}
{
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_UNIT=jellyfin.service" ];
labels.type = "jellyfin";
}
{
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_UNIT=seerr.service" ];
labels.type = "seerr";
}
];
};
crowdsec-firewall-bouncer = {
enable = true;
};
vaultwarden = {
enable = true;
environmentFile = config.sops.secrets."vaultwarden.env".path;