Compare commits

..

1 commit

Author SHA1 Message Date
2651693a7b
feat: Add crowdsec module 2025-01-30 03:36:23 +08:00
4 changed files with 1 additions and 32 deletions

View file

@ -18,7 +18,6 @@
./services/backups.nix
./services/battery-manager.nix
./services/conduit.nix
./services/crowdsec.nix
./services/foundryvtt.nix
./services/gitea.nix
./services/metrics

View file

@ -1,26 +0,0 @@
{ pkgs, ... }:
{
services.crowdsec = {
enable = true;
parserWhitelist = [
"1.64.239.213"
];
settings.crowdsec_service.acquisition_path = pkgs.writeText "crowdsec-acquisitions.yaml" ''
---
source: journalctl
journalctl_filter:
- "SYSLOG_IDENTIFIER=Nextcloud"
labels:
type: syslog
---
source: journalctl
journalctl_filter:
- "SYSLOG_IDENTIFIER=sshd-service"
labels:
type: syslog
---
'';
};
}

View file

@ -10,7 +10,6 @@
extraSettings.authorization.credentials_file = config.sops.secrets."forgejo/metrics-token".path;
};
coturn.targets = [ "127.0.0.1:9641" ];
crowdsec.targets = [ "127.0.0.1:6060" ];
};
};
}

View file

@ -200,10 +200,7 @@ in
];
environment = {
systemPackages = [
# TODO(tlater): Figure out a way to get completions to work
cscli
];
systemPackages = [ cscli ];
etc."crowdsec/config.yaml".source = settingsFormat.generate "crowdsec-settings.yaml" cfg.settings;
};