Start using crowdsec
This commit is contained in:
parent
010a8fb7c9
commit
3b0cc2314d
2 changed files with 30 additions and 0 deletions
28
roles/crowdsec/tasks/main.yml
Normal file
28
roles/crowdsec/tasks/main.yml
Normal file
|
@ -0,0 +1,28 @@
|
||||||
|
---
|
||||||
|
- name: Add apt key for crowdsec
|
||||||
|
apt_key:
|
||||||
|
url: https://packagecloud.io/crowdsec/crowdsec/gpgkey
|
||||||
|
state: present
|
||||||
|
|
||||||
|
- name: Add crowdsec repository into sources list
|
||||||
|
apt_repository:
|
||||||
|
repo: deb https://packagecloud.io/crowdsec/crowdsec/debian bullseye main
|
||||||
|
state: present
|
||||||
|
|
||||||
|
- name: Install crowdsec packages
|
||||||
|
apt:
|
||||||
|
name:
|
||||||
|
- crowdsec
|
||||||
|
state: present
|
||||||
|
# sudo cscli lapi register -u http://192.168.1.10:8081 --machine npm-crowdsec
|
||||||
|
# accept on unraid crowdsec
|
||||||
|
# sudo systemctl restart crowdsec
|
||||||
|
# update /etc/crowdsec/acquis.yml
|
||||||
|
# filenames:
|
||||||
|
# - ~/data/logs/*.log
|
||||||
|
# labels:
|
||||||
|
# type: nginx-proxy-manager#
|
||||||
|
# cscli collections install crowdsecurity/nginx-proxy-manager
|
||||||
|
#
|
||||||
|
# /etc/crowdsec/config.yml
|
||||||
|
# * listen_uri: 127.0.0.1:8080 # to 8081
|
2
site.yml
2
site.yml
|
@ -22,5 +22,7 @@
|
||||||
become: yes
|
become: yes
|
||||||
roles:
|
roles:
|
||||||
- role: docker
|
- role: docker
|
||||||
|
- role: crowdsec
|
||||||
|
tags: cs
|
||||||
- role: nginx-proxy-manager
|
- role: nginx-proxy-manager
|
||||||
tags: npm
|
tags: npm
|
||||||
|
|
Loading…
Reference in a new issue