Update crowdsec deployment

This commit is contained in:
Adrien Reslinger 2023-11-26 10:48:23 +01:00
parent 0cfe2972c0
commit b045b7808a
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
3 changed files with 40 additions and 4 deletions

View file

@ -25,6 +25,10 @@ lapi:
value: "{{ inventory_hostname }}"
- name: ENROLL_TAGS
value: "k8s {{ inventory_hostname }}"
{% endif %}
{% if traefik_crowdsec_bouncer_apikey is defined %}
- name: BOUNCER_KEY_traefik
value: "{{ traefik_crowdsec_bouncer_apikey }}"
{% endif %}
dashboard:
# -- Enable Metabase Dashboard (by default disabled)
@ -87,9 +91,9 @@ agent:
value: "crowdsecurity/cri-logs"
# As we are running Nginx, we want to install the Nginx collection
- name: COLLECTIONS
value: "crowdsecurity/traefik"
value: "crowdsecurity/traefik crowdsecurity/linux-lpe crowdsecurity/http-cve crowdsecurity/whitelist-good-actors"
- name: SCENARIOS
value: "crowdsecurity/linux-lpe crowdsecurity/http-crawl-non_statics"
value: "crowdsecurity/http-crawl-non_statics"
metrics:
enabled: true
serviceMonitor: