Difference between revisions of "CrowdSec"

From Indie IT Wiki
 
(One intermediate revision by the same user not shown)
Line 8: Line 8:
  
 
=== Docker ===
 
=== Docker ===
 +
 +
'''[https://blog.lrvt.de/configuring-crowdsec-with-traefik/ Configuring CrowdSec with Traefik]'''
  
 
[https://www.youtube.com/watch?v=qnviPAMwAuw Setup CrowdSec with Nginx Proxy Manager - YouTube]
 
[https://www.youtube.com/watch?v=qnviPAMwAuw Setup CrowdSec with Nginx Proxy Manager - YouTube]
Line 22: Line 24:
 
  docker exec crowdsec cscli decisions add --ip 123.456.789.0 --duration 2m
 
  docker exec crowdsec cscli decisions add --ip 123.456.789.0 --duration 2m
 
  docker exec crowdsec cscli decisions delete --ip 123.456.789.0
 
  docker exec crowdsec cscli decisions delete --ip 123.456.789.0
 +
 +
== Notifications ==
 +
 +
https://docs.crowdsec.net/docs/notification_plugins/email/
  
 
== Help ==
 
== Help ==

Latest revision as of 16:13, 5 November 2024

Introduction

CrowdSec is a platform that collects and curates data on aggressive IPs from real users and servers in real production environments. It provides actionable blocklists to reduce security alerts, server load, and incident response costs.

It can be integrated with all the popular proxy software solutions such as Nginx Proxy Manager and Traefik to automatically defend against all known cyber attacks.

Installation

Docker

Configuring CrowdSec with Traefik

Setup CrowdSec with Nginx Proxy Manager - YouTube

Setup CrowdSec with Traefik - YouTube

Traefik Bouncer - CrowdSec Hub

Usage

docker exec crowdsec cscli metrics
docker exec crowdsec cscli bouncer list
docker exec crowdsec cscli decisions list
docker exec crowdsec cscli decisions add --ip 123.456.789.0 --duration 2m
docker exec crowdsec cscli decisions delete --ip 123.456.789.0

Notifications

https://docs.crowdsec.net/docs/notification_plugins/email/

Help