diff --git a/README.md b/README.md index d0ce05310794d7d2ba0db1ad6d67a231f54e8731..27d18d244e8d409f0228df43d80dacd42dbda09d 100644 --- a/README.md +++ b/README.md @@ -34,14 +34,28 @@ Besides detecting and stopping attacks in real time based on your logs, it allow ## Key points -### Easy installation, no technical barrier +### Fast assisted installation, no technical barrier CrowdSec install +> User is assisted during setup, providing functional out-of-the-box setup + ### Out of the box detection CrowdSec install +> Baseline detection is effective out-of-the-box, no fine-tuning required + +### Easy blocker deployment + +CrowdSec install + +> It's trivial to add blockers to enforce decisions of crowdsec + +### Dashboard at handreach + + + ## About this repository This repository contains the code for the two main components of crowdsec : diff --git a/config/user.yaml b/config/user.yaml new file mode 100644 index 0000000000000000000000000000000000000000..addbdf7262ef9482f671f4b6c0193c71f2edb8d2 --- /dev/null +++ b/config/user.yaml @@ -0,0 +1,17 @@ +working_dir: /tmp/ +data_dir: ${DATA} +config_dir: ${CFG} +pid_dir: ${PID} +log_dir: /var/log/ +cscli_dir: ${CFG}/cscli +log_mode: stdout +log_level: info +profiling: false +sqlite_path: ${DATA}/crowdsec.db +apimode: true +daemon: false +prometheus: true +#for prometheus agent / golang debugging +http_listen: 127.0.0.1:6060 +plugin: + backend: "/etc/crowdsec/plugins/backend" diff --git a/wizard.sh b/wizard.sh index cd3063d31b47ab7eceddc161baf92cbeff72f6e7..4214d4e1a9eb6febd0546908bd0acfe39958c02d 100755 --- a/wizard.sh +++ b/wizard.sh @@ -288,6 +288,7 @@ install_crowdsec() { install -v -m 600 -D ./config/api.yaml "${CROWDSEC_CONFIG_PATH}" || exit mkdir -p ${PID_DIR} || exit PID=${PID_DIR} DATA=${CROWDSEC_DATA_DIR} CFG=${CROWDSEC_CONFIG_PATH} envsubst < ./config/prod.yaml > ${CROWDSEC_CONFIG_PATH}"/default.yaml" + PID=${PID_DIR} DATA=${CROWDSEC_DATA_DIR} CFG=${CROWDSEC_CONFIG_PATH} envsubst < ./config/user.yaml > ${CROWDSEC_CONFIG_PATH}"/user.yaml" CFG=${CROWDSEC_CONFIG_PATH} PID=${PID_DIR} BIN=${CROWDSEC_BIN_INSTALLED} envsubst < ./config/crowdsec.service > "${SYSTEMD_PATH_FILE}" install_bins systemctl daemon-reload