aykhans/my-self-host-services
1
0
Fork 0
mirror of https://github.com/aykhans/my-self-host-services.git synced 2026-05-29 15:35:59 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Compare commits

base: aykhans/my-self-host-services:ba03407420e513d34b90f40df0c2676e2491a84c
Branches Tags
aykhans/my-self-host-services:main
...
compare: aykhans/my-self-host-services:14e61156185c69821f516f635f1f1c1ae07ac196
Branches Tags
aykhans/my-self-host-services:main

1 Commits
ba03407420 ... 14e6115618

Author SHA1 Message Date
aykhans 14e6115618 crowdsec: add profiles/profiles.yaml 2026-05-17 13:52:59 +04:00
2 changed files with 19 additions and 0 deletions
Expand all files Collapse all files
crowdsec/docker-compose.yaml
+1
View File
@@ -36,6 +36,7 @@ services:
- ./data/db:/var/lib/crowdsec/data - ./data/db:/var/lib/crowdsec/data
- ./data/config:/etc/crowdsec - ./data/config:/etc/crowdsec
- ./acquis.d:/etc/crowdsec/acquis.d:ro - ./acquis.d:/etc/crowdsec/acquis.d:ro
- ./profiles/profiles.yaml:/etc/crowdsec/profiles.yaml:ro
- ./parsers/s00-raw/stalwart-logs.yaml:/etc/crowdsec/parsers/s00-raw/stalwart-logs.yaml:ro - ./parsers/s00-raw/stalwart-logs.yaml:/etc/crowdsec/parsers/s00-raw/stalwart-logs.yaml:ro
- ./parsers/s01-parse/stalwart-logs-extended.yaml:/etc/crowdsec/parsers/s01-parse/stalwart-logs-extended.yaml:ro - ./parsers/s01-parse/stalwart-logs-extended.yaml:/etc/crowdsec/parsers/s01-parse/stalwart-logs-extended.yaml:ro
- ./parsers/s02-enrich/whitelist-trusted.yaml:/etc/crowdsec/parsers/s02-enrich/whitelist-trusted.yaml:ro - ./parsers/s02-enrich/whitelist-trusted.yaml:/etc/crowdsec/parsers/s02-enrich/whitelist-trusted.yaml:ro
crowdsec/profiles/profiles.yaml
+18
View File
@@ -0,0 +1,18 @@
name: default_ip_remediation
filters:
- Alert.Remediation == true && Alert.GetScope() == "Ip"
decisions:
- type: ban
duration: 4h
duration_expr: Sprintf('%dh', min(168, (GetDecisionsCount(Alert.GetValue())+1)*4))
on_success: break
---
name: default_range_remediation
filters:
- Alert.Remediation == true && Alert.GetScope() == "Range"
decisions:
- type: ban
duration: 4h
duration_expr: Sprintf('%dh', min(168, (GetDecisionsCount(Alert.GetValue())+1)*4))
on_success: break