From 5d64dee065c4cc0ae9d5b673205edd53df593d4d Mon Sep 17 00:00:00 2001
From: akanealw <akanealw@gmail.com>
Date: Sun, 3 Sep 2023 18:53:03 -0500
Subject: [PATCH] moved crowdsec to proxy docker compose

---
 crowdsec/acquis.yaml     | 10 ++++++++++
 docker-compose.yml       | 19 -------------------
 proxy/docker-compose.yml | 19 +++++++++++++++++++
 3 files changed, 29 insertions(+), 19 deletions(-)
 create mode 100644 crowdsec/acquis.yaml

diff --git a/crowdsec/acquis.yaml b/crowdsec/acquis.yaml
new file mode 100644
index 0000000..48e06b5
--- /dev/null
+++ b/crowdsec/acquis.yaml
@@ -0,0 +1,10 @@
+filenames:
+  - /logs/nginx/*.log
+labels:
+  type: nginx-proxy-manager
+---
+filenames:
+ - /logs/auth.log
+ - /logs/syslog.log
+labels:
+  type: syslog
diff --git a/docker-compose.yml b/docker-compose.yml
index bc3dbd6..9656be7 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -14,25 +14,6 @@ services:
     volumes:
       - ${DOCKERCONFIGS}/collabora/code:/etc/loolwsd
 
-  crowdsec:
-    container_name: crowdsec
-    image: crowdsecurity/crowdsec
-    environment:
-      - COLLECTIONS=crowdsecurity/apache2 crowdsecurity/sshd crowdsecurity/nginx
-      - BOUNCER_KEY_OPENWRT=e5eafa00ff6db5164b12426c6cfb6b62
-    ports:
-      - 8280:8080
-      - 6260:6060
-    restart: always
-    volumes:
-      - ${DOCKERCONFIGS}/crowdsec/config:/etc/crowdsec
-      - ${DOCKERCONFIGS}/crowdsec/config/acquis.d:/etc/crowdsec/acquis.d
-      - ${DOCKERCONFIGS}/crowdsec/config/acquis.yaml:/etc/crowdsec/acquis.yaml
-      - ${DOCKERCONFIGS}/crowdsec/data:/var/lib/crowdsec/data
-      - /home/akanealw/docker/proxy/appdata/nginxproxymanager/data/logs2:/logs/nginx:ro
-      - /var/log/auth.log:/logs/auth.log:ro
-      - /var/log/syslog.log:/logs/syslog.log:ro
-
   freshrss:
     container_name: freshrss
     image: freshrss/freshrss:latest
diff --git a/proxy/docker-compose.yml b/proxy/docker-compose.yml
index 102615c..a5a60f2 100644
--- a/proxy/docker-compose.yml
+++ b/proxy/docker-compose.yml
@@ -12,6 +12,25 @@ services:
     volumes:
       - ${DOCKERCONFIGS}/authelia/config:/config
 
+  crowdsec:
+    container_name: crowdsec
+    image: crowdsecurity/crowdsec
+    environment:
+      - COLLECTIONS=crowdsecurity/apache2 crowdsecurity/sshd crowdsecurity/nginx
+      - BOUNCER_KEY_OPENWRT=e5eafa00ff6db5164b12426c6cfb6b62
+    ports:
+      - 8280:8080
+      - 6260:6060
+    restart: always
+    volumes:
+      - ${DOCKERCONFIGS}/crowdsec/config:/etc/crowdsec
+      - ${DOCKERCONFIGS}/crowdsec/config/acquis.d:/etc/crowdsec/acquis.d
+      - ${DOCKERCONFIGS}/crowdsec/config/acquis.yaml:/etc/crowdsec/acquis.yaml
+      - ${DOCKERCONFIGS}/crowdsec/data:/var/lib/crowdsec/data
+      - ${DOCKERCONFIGS}/nginxproxymanager/data/logs:/logs/nginx:ro
+      - /var/log/auth.log:/logs/auth.log:ro
+      - /var/log/syslog.log:/logs/syslog.log:ro
+
   ddclient:
     container_name: ddclient
     image: lscr.io/linuxserver/ddclient:latest