ediblerope
7ec6146917
Enables the CrowdSec agent with sshd/nginx/http-cve hub collections, acquires logs from nginx, sshd, and Authelia journald, and wires the firewall bouncer to enforce bans via nftables. Alerts are POSTed to a self-chosen ntfy.sh topic (URL read from /var/secrets/ntfy-url, falls back to a placeholder so the repo stays eval-clean without the secret). Module is self-contained — remove the file + import to uninstall; state lives under /var/lib/crowdsec. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| adguard.nix | ||
| arr-interconnect.nix | ||
| authelia.nix | ||
| bazarr.nix | ||
| cloudflare-ddns.md | ||
| cloudflare-ddns.nix | ||
| crowdsec.nix | ||
| fail2ban.nix | ||
| game-servers.nix | ||
| go2rtc.nix | ||
| homepage.nix | ||
| jellyfin.nix | ||
| nginx.nix | ||
| prowlarr.nix | ||
| qbittorrent-nox.nix | ||
| radarr.nix | ||
| router.nix | ||
| server-permissions.nix | ||
| sonarr.nix | ||