tlaternet/tlaternet-server
1
0
Fork 0
Code Issues10 Pull requests Releases Activity

feat: Add crowdsec to replace fail2ban

Browse source
This commit is contained in:
Tristan Daniël Maat 2025-01-30 03:50:08 +08:00
parent 5f4d4de135
commit ae4cc7cb08
Signed by: tlater
GPG key ID: 49670FD774E43268
3 changed files with 52 additions and 0 deletions
configuration/services/metrics
victoriametrics.nix

16
configuration/services/metrics/victoriametrics.nix
View file

@ -10,6 +10,22 @@
extraSettings.authorization.credentials_file = config.sops.secrets."forgejo/metrics-token".path;
};
coturn.targets = [ "127.0.0.1:9641" ];
crowdsec.targets =
let
address = config.security.crowdsec.settings.prometheus.listen_addr;
port = config.security.crowdsec.settings.prometheus.listen_port;
in
[ "${address}:${toString port}" ];
csFirewallBouncer.targets =
let
address =
config.security.crowdsec.remediationComponents.firewallBouncer.settings.prometheus.listen_addr;
port =
config.security.crowdsec.remediationComponents.firewallBouncer.settings.prometheus.listen_port;
in
[ "${address}:${toString port}" ];
};
};
}