Compose-Examples/examples/crowdsec/docker-compose.yml
2024-10-25 15:28:09 +02:00

30 lines
995 B
YAML

services:
crowdsec:
image: crowdsecurity/crowdsec:v1.6.3
container_name: crowdsec
restart: unless-stopped
expose:
- 8080
volumes:
# crowdsec container data
- ${DOCKER_VOLUME_STORAGE:-/mnt/docker-volumes}/crowdsec/data:/var/lib/crowdsec/data
- ${DOCKER_VOLUME_STORAGE:-/mnt/docker-volumes}/crowdsec/etc:/etc/crowdsec
# log bind mounts into crowdsec
- /var/log/auth.log:/var/log/auth.log:ro
- /var/log/syslog:/var/log/syslog:ro
- ${DOCKER_VOLUME_STORAGE:-/mnt/docker-volumes}/traefik/logs:/var/log/traefik:ro
environment:
- GID=1000
- BOUNCER_KEY_TRAEFIK=${CROWDSEC-BOUNCER-API-TOKEN:-FIXME-LAPI-KEY}
- COLLECTIONS=crowdsecurity/traefik crowdsecurity/http-cve crowdsecurity/appsec-generic-rules crowdsecurity/appsec-virtual-patching
#- CUSTOM_HOSTNAME=crowdsec-host123
#security_opt:
# - no-new-privileges=true
#networks:
# - proxy
#networks:
# proxy:
# external: true