Add Security_Containers/crowdsec/compose.yaml

Security_Containers/crowdsec/compose.yaml

@@ -0,0 +1,35 @@
+services:
+  crowdsec:
+    image: crowdsecurity/crowdsec:latest
+    container_name: crowdsec
+    environment:
+      GID: "${GID-1000}"
+      COLLECTIONS: "crowdsecurity/linux crowdsecurity/traefik"
+    volumes:
+      - /srv/docker/crowdsec/config/acquis.yaml:/etc/crowdsec/acquis.yaml
+      - /srv/docker/crowdsec/crowdsec-db:/var/lib/crowdsec/data/
+      - /srv/docker/crowdsec/crowdsec-config:/etc/crowdsec/
+      - traefik_traefik-logs:/var/log/traefik/:ro
+    networks:
+      - traefik_network
+    restart: unless-stopped
+
+  bouncer-traefik:
+    image: docker.io/fbonalair/traefik-crowdsec-bouncer:latest
+    container_name: bouncer-traefik
+    environment:
+      CROWDSEC_BOUNCER_API_KEY: some-api-key
+      CROWDSEC_AGENT_HOST: crowdsec:8080
+    networks:
+      - traefik_network # same network as traefik + crowdsec
+    depends_on:
+      - crowdsec
+    restart: unless-stopped
+
+networks:
+  traefik_network:
+    external: true
+
+volumes:
+  traefik_traefik-logs: # this will be the name of the volume from traefik logs
+    external: true # remove if traefik is running on same stack