Daniel Berteaud
4 years ago
parent
3431050b2f
commit
e8311ecfce
14 changed files with 171 additions and 171 deletions
@ -1,71 +1,71 @@ |
||||
--- |
||||
|
||||
# Version to install |
||||
crowdsec_version: 1.0.7 |
||||
cs_version: 1.0.7 |
||||
# URL of the archive |
||||
crowdsec_archive_url: https://github.com/crowdsecurity/crowdsec/releases/download/v{{ crowdsec_version }}/crowdsec-release.tgz |
||||
cs_archive_url: https://github.com/crowdsecurity/crowdsec/releases/download/v{{ cs_version }}/crowdsec-release.tgz |
||||
# Expected sha1 of the archive |
||||
crowdsec_archive_sha1: 7c9dc58c6648c8fd43b297427d6a53fe940cbf13 |
||||
cs_archive_sha1: 7c9dc58c6648c8fd43b297427d6a53fe940cbf13 |
||||
|
||||
# Can be sqlite or mysql |
||||
crowdsec_db_engine: sqlite |
||||
cs_db_engine: sqlite |
||||
# This is for mysql backend |
||||
crowdsec_db_server: "{{ mysql_server | default('localhost') }}" |
||||
crowdsec_db_port: 3306 |
||||
crowdsec_db_name: crowdsec |
||||
crowdsec_db_user: crowdsec |
||||
cs_db_server: "{{ mysql_server | default('localhost') }}" |
||||
cs_db_port: 3306 |
||||
cs_db_name: crowdsec |
||||
cs_db_user: crowdsec |
||||
# If not defined, a random one will be generated and store in /etc/crowdsec/meta/ansible_dbpass |
||||
# crowdsec_db_pass: S3cr3t. |
||||
# cs_db_pass: S3cr3t. |
||||
|
||||
# You can disable the Local API, if using a remote one for example |
||||
crowdsec_lapi_enabled: True |
||||
cs_lapi_enabled: True |
||||
# Set to true if Local API is enabled, and you intend to use it through a trusted reverse proxy |
||||
crowdsec_use_forwarded_headers: False |
||||
cs_use_forwarded_headers: False |
||||
# Port on which the Local API will listen |
||||
crowdsec_lapi_port: 8080 |
||||
# List of IP/CIDR allowed to access crowdsec_lapi_port |
||||
crowdsec_lapi_src_ip: [] |
||||
cs_lapi_port: 8080 |
||||
# List of IP/CIDR allowed to access cs_lapi_port |
||||
cs_lapi_src_ip: [] |
||||
|
||||
# Address of the Local API server |
||||
# The default config will make it standalone |
||||
crowdsec_lapi_url: http://localhost:{{ crowdsec_lapi_port }}/ |
||||
crowdsec_lapi_user: "{{ inventory_hostname }}" |
||||
cs_lapi_url: http://localhost:{{ cs_lapi_port }}/ |
||||
cs_lapi_user: "{{ inventory_hostname }}" |
||||
# On installation, ansible will register this host on the Local API |
||||
# And will then validate the registration on the following server. |
||||
# So set it to your own Local API server so ansible will delegate the task |
||||
crowdsec_lapi_server: "{{ inventory_hostname }}" |
||||
cs_lapi_server: "{{ inventory_hostname }}" |
||||
|
||||
# Use the central API, to share your banned IP, and received list of IP to ban |
||||
# Requires crowdsec_lapi_enabled to be true too |
||||
crowdsec_capi_enabled: False |
||||
# Requires cs_lapi_enabled to be true too |
||||
cs_capi_enabled: False |
||||
# You can either register manuelly and the the user/pass with those variable |
||||
# Else, ansible will register and configure the credentials |
||||
# crowdsec_capi_user: 123456789 |
||||
# crowdsec_capi_pass: azertyuiop |
||||
# cs_capi_user: 123456789 |
||||
# cs_capi_pass: azertyuiop |
||||
|
||||
# Port on which the prometheus metric endpoint will bind to |
||||
crowdsec_prometheus_port: 6060 |
||||
cs_prometheus_port: 6060 |
||||
# List of IP/CIDR allowed to access the prometheus port |
||||
crowdsec_prometheus_src_ip: [] |
||||
cs_prometheus_src_ip: [] |
||||
|
||||
# Default duration of a ban |
||||
crowdsec_ban_duration: 15m |
||||
cs_ban_duration: 15m |
||||
|
||||
# List of parsers to install from the hub |
||||
crowdsec_parsers: |
||||
- crowdsecurity/syslog-logs |
||||
- crowdsecurity/geoip-enrich |
||||
- crowdsecurity/dateparse-enrich |
||||
- crowdsecurity/whitelists |
||||
cs_parsers: [] |
||||
# - crowdsecurity/syslog-logs |
||||
# - crowdsecurity/geoip-enrich |
||||
# - crowdsecurity/dateparse-enrich |
||||
# - crowdsecurity/whitelists |
||||
# - crowdsecurity/sshd-logs |
||||
# - crowdsecurity/iptables-logs |
||||
# List of scenarios to install from the hub |
||||
crowdsec_scenarios: |
||||
- crowdsecurity/ban-defcon-drop_range |
||||
cs_scenarios: [] |
||||
# - crowdsecurity/ban-defcon-drop_range |
||||
# - crowdsecurity/ssh-bf |
||||
# List of postoverflows to install from the hub |
||||
crowdsec_postoverflows: |
||||
- crowdsecurity/cdn-whitelist |
||||
- crowdsecurity/rdns |
||||
- crowdsecurity/seo-bots-whitelist |
||||
cs_postoverflows: [] |
||||
# - crowdsecurity/cdn-whitelist |
||||
# - crowdsecurity/rdns |
||||
# - crowdsecurity/seo-bots-whitelist |
||||
|
||||
|
||||
@ -1,3 +1,3 @@ |
||||
url: {{ crowdsec_lapi_enabled | ternary('http://127.0.0.1:' ~ crowdsec_lapi_port,(crowdsec_lapi_url is search('/$')) | ternary(crowdsec_lapi_url, crowdsec_lapi_url ~ '/')) }} |
||||
login: {{ crowdsec_lapi_user }} |
||||
password: {{ crowdsec_lapi_pass }} |
||||
url: {{ cs_lapi_enabled | ternary('http://127.0.0.1:' ~ cs_lapi_port,(cs_lapi_url is search('/$')) | ternary(cs_lapi_url, cs_lapi_url ~ '/')) }} |
||||
login: {{ cs_lapi_user }} |
||||
password: {{ cs_lapi_pass }} |
||||
|
||||
@ -1,7 +1,7 @@ |
||||
url: https://api.crowdsec.net/ |
||||
{% if crowdsec_capi_user is defined %} |
||||
login: {{ crowdsec_capi_user }} |
||||
{% if cs_capi_user is defined %} |
||||
login: {{ cs_capi_user }} |
||||
{% endif %} |
||||
{% if crowdsec_capi_pass is defined %} |
||||
password: {{ crowdsec_capi_pass }} |
||||
{% if cs_capi_pass is defined %} |
||||
password: {{ cs_capi_pass }} |
||||
{% endif %} |
||||
|
||||
Loading…
Reference in new issue