diff --git a/Security_Containers/crowdsec/compose.yaml b/Security_Containers/crowdsec/compose.yaml new file mode 100644 index 0000000..9aaaddb --- /dev/null +++ b/Security_Containers/crowdsec/compose.yaml @@ -0,0 +1,35 @@ +services: + crowdsec: + image: crowdsecurity/crowdsec:latest + container_name: crowdsec + environment: + GID: "${GID-1000}" + COLLECTIONS: "crowdsecurity/linux crowdsecurity/traefik" + volumes: + - /srv/docker/crowdsec/config/acquis.yaml:/etc/crowdsec/acquis.yaml + - /srv/docker/crowdsec/crowdsec-db:/var/lib/crowdsec/data/ + - /srv/docker/crowdsec/crowdsec-config:/etc/crowdsec/ + - traefik_traefik-logs:/var/log/traefik/:ro + networks: + - traefik_network + restart: unless-stopped + + bouncer-traefik: + image: docker.io/fbonalair/traefik-crowdsec-bouncer:latest + container_name: bouncer-traefik + environment: + CROWDSEC_BOUNCER_API_KEY: some-api-key + CROWDSEC_AGENT_HOST: crowdsec:8080 + networks: + - traefik_network # same network as traefik + crowdsec + depends_on: + - crowdsec + restart: unless-stopped + +networks: + traefik_network: + external: true + +volumes: + traefik_traefik-logs: # this will be the name of the volume from traefik logs + external: true # remove if traefik is running on same stack \ No newline at end of file