I would be interested in this. I used crowdsec+caddy through Opnsense firewall, liked it.
services:
caddy:
build:
context: .
dockerfile: Containerfile
container_name: caddy
restart: always
security_opt:
- no-new-privileges=true
cap_add:
- NET_ADMIN
environment:
CROWDSEC_API_KEY: "${CROWDSEC_API_KEY}"
ports:
- 80:80
- 443:443
- 443:443/udp
networks:
- webproxy
- crowdsec
volumes:
- ./config/caddy:/etc/caddy
- ./data/caddy:/data
- logs:/var/log/caddy
command: run --config /etc/caddy/Caddyfile
crowdsec:
image: crowdsecurity/crowdsec
restart: unless-stopped
security_opt:
- no-new-privileges=true
environment:
GID: "${GID:-1000}"
COLLECTIONS: crowdsecurity/caddy crowdsecurity/http-cve crowdsecurity/whitelist-good-actors
BOUNCER_KEY_CADDY: "${CROWDSEC_API_KEY}"
networks:
- crowdsec
volumes:
- crowdsec-db:/var/lib/crowdsec/db
- ./config/crowdsec/acquis.yaml:/etc/crowdsec/acquis.yaml
- logs:/var/log/caddy:ro
networks:
crowdsec:
webproxy:
name: webproxy
volumes:
logs:
crowdsec-db:Display Morecap_add:
- NET_ADMIN
-------
ports:
- 80:80
- 443:443
- 443:443/udp
Using these on a container will clash with OMV GUI if you don't change the web port the workbench uses to something other then 80
I can't find any documentation that describes this specific situation...
CodeDisplay Moreservices: caddy: build: context: . dockerfile: Containerfile container_name: caddy restart: always security_opt: - no-new-privileges=true cap_add: - NET_ADMIN environment: CROWDSEC_API_KEY: "${CROWDSEC_API_KEY}" ports: - 80:80 - 443:443 - 443:443/udp networks: - webproxy - crowdsec volumes: - ./config/caddy:/etc/caddy - ./data/caddy:/data - logs:/var/log/caddy command: run --config /etc/caddy/Caddyfile crowdsec: image: crowdsecurity/crowdsec restart: unless-stopped security_opt: - no-new-privileges=true environment: GID: "${GID:-1000}" COLLECTIONS: crowdsecurity/caddy crowdsecurity/http-cve crowdsecurity/whitelist-good-actors BOUNCER_KEY_CADDY: "${CROWDSEC_API_KEY}" networks: - crowdsec volumes: - crowdsec-db:/var/lib/crowdsec/db - ./config/crowdsec/acquis.yaml:/etc/crowdsec/acquis.yaml - logs:/var/log/caddy:ro networks: crowdsec: webproxy: name: webproxy volumes: logs: crowdsec-db:
If I do it this way, will it work out of the box, or do I need to configure some things?
What should the caddy file look like for crowdsec?
Unfortunately I could not get it work the way I wanted to so gave up.. My best experience with this combo config was as I said, using OPNSense as my firewall/router.
Don’t have an account yet? Register yourself now and be a part of our community!
