rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

CrowdSec: register CAPI, enroll console

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
rope 2026-09-23 13:26:36 +01:00
parent 55ac1c67ed
commit 5234d6373d
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
services/crowdsec.nix
View file

@ -80,6 +80,9 @@ in
settings = {
# config.yaml — main agent + LAPI configuration
config.api.server.listen_uri = "127.0.0.1:8081"; # 8080 is qBit
# CAPI: community blocklist + console (app.crowdsec.net). Setup auto-registers.
config.api.server.online_client.credentials_path = "/var/lib/crowdsec/data/online_api_credentials.yaml";
console.enrollKeyFile = "/var/secrets/crowdsec-enroll-key";
# Drop alerts originating from LAN clients before they're scored.
# Without this, repeated Authelia 401s from inside the house (e.g.