<![CDATA[Implement Crowdsec, a docker and sever level crowd sourced security guard]]>I would like to suggest implemententing Crowdsec as a built-in feature to a cloudron install. Assuming most of our installs (speaking on the community behalf) are internet facing, something like this, could become very powerful and beneficial as a security feature.

]]>https://forum.cloudron.io/topic/5990/implement-crowdsec-a-docker-and-sever-level-crowd-sourced-security-guardRSS for NodeThu, 11 Jun 2026 13:39:46 GMTFri, 12 Nov 2021 07:09:00 GMT60<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Thu, 17 Feb 2022 10:45:22 GMT]]>In my experience, DO not install the nginx bouncer, it's useless if you install the firewall-bouncer anyway. (the firewall bouncer catch attacks, probs etc..even before they reach the nginx server)

There is another post on this forum another user and me share their steps by steps to get it running.

]]>https://forum.cloudron.io/post/43552https://forum.cloudron.io/post/43552Thu, 17 Feb 2022 10:45:22 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Wed, 19 Jan 2022 20:02:07 GMT]]>Hey, since I was here last time we have created a Discord server and that would be a good place to influence CrowdSec devs to implement CrowdSec into Cloudron 🙂

]]>https://forum.cloudron.io/post/42081https://forum.cloudron.io/post/42081Wed, 19 Jan 2022 20:02:07 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 17 Dec 2021 19:14:35 GMT]]>@makemrproper my strategy now is to use iptables bouncer with nginx parser.

See my feature request for nginx log method though.. you have to revert cloudron nginx logs back to nginx default and not combined2 as they are normally or crowdsec parser won't work..

]]>https://forum.cloudron.io/post/40681https://forum.cloudron.io/post/40681Fri, 17 Dec 2021 19:14:35 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 17 Dec 2021 19:12:53 GMT]]>@makemrproper yeah I tried it twice and first time told it to keep original config and second time allowed modifications.. both times nginx refused to start and I couldn't figure out why.

]]>https://forum.cloudron.io/post/40680https://forum.cloudron.io/post/40680Fri, 17 Dec 2021 19:12:53 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 17 Dec 2021 16:48:35 GMT]]>@mastadamus Confirmed. This happened to me today, when I tried to install Crowdsec with Nginx bouncer onto my Cloudron VM.

Thank heavens for a good backup strategy. Digital Ocean snapshots to the rescue.

To have Crowdsec working with my Cloudron install would be a massive value add.

I am not even sure why Nginx failed to start afterwards. I did however note that the install modified or wiped a lot of the Nginx configs which were already in place and perhaps modified by Cloudron. But I haven't tried to dive any deeper.

]]>https://forum.cloudron.io/post/40665https://forum.cloudron.io/post/40665Fri, 17 Dec 2021 16:48:35 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 10 Dec 2021 19:10:22 GMT]]>@privsec Yes of course. If you post a question about it in our Discourse https://discourse.crowdsec.net I am sure someone on the team is able to help.

]]>https://forum.cloudron.io/post/40360https://forum.cloudron.io/post/40360Fri, 10 Dec 2021 19:10:22 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 10 Dec 2021 18:02:24 GMT]]>@klausagnoletti yup

]]>https://forum.cloudron.io/post/40359https://forum.cloudron.io/post/40359Fri, 10 Dec 2021 18:02:24 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 10 Dec 2021 07:00:48 GMT]]>

@klausagnoletti is this something that could be done by your team?

Sorry but which part? Parsers?

]]>https://forum.cloudron.io/post/40339https://forum.cloudron.io/post/40339Fri, 10 Dec 2021 07:00:48 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 10 Dec 2021 03:56:17 GMT]]>@privsec The other thing to consider is, when i installed the nginx bouncer, even though i left configs default, it crashed the nginx service and i couldn't restart it. Even after I uninstalled the bouncer, I couldn't get nginx back so i had reverted to a snapshot. The iptable bouncer works decent though. Will have to do further testing to figure out why installing the nginx bouncer crashes nginx for cloudron.

]]>https://forum.cloudron.io/post/40337https://forum.cloudron.io/post/40337Fri, 10 Dec 2021 03:56:17 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 10 Dec 2021 03:38:47 GMT]]>@mastadamus said in Implement Crowdsec, a docker and sever level crowd sourced security guard:

@mastadamus I've since got the logs to be parsed by taking out the custom "combined2" log format for nginx.conf. If this is to be shipped with cloudron it would either require to have custom parsers written OR the nginx.conf for cloudron would need to use default combined log format. ddba26c0-91de-425e-a9f3-12852c5122df-image.png

I am using an iptable bouncer and i'm not sure if it will perform block actions on the iptables based of something triggerd by nginx. I will dig further into that. That being said, it is fullfulling the role fail2ban would normally play and is working appropriately.

@klausagnoletti is this something that could be done by your team?

]]>https://forum.cloudron.io/post/40336https://forum.cloudron.io/post/40336Fri, 10 Dec 2021 03:38:47 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 10 Dec 2021 02:47:20 GMT]]>@mastadamus I've since got the logs to be parsed by taking out the custom "combined2" log format for nginx.conf. If this is to be shipped with cloudron it would either require to have custom parsers written OR the nginx.conf for cloudron would need to use default combined log format. ddba26c0-91de-425e-a9f3-12852c5122df-image.png

I am using an iptable bouncer and i'm not sure if it will perform block actions on the iptables based of something triggerd by nginx. I will dig further into that. That being said, it is fullfulling the role fail2ban would normally play and is working appropriately.

]]>https://forum.cloudron.io/post/40335https://forum.cloudron.io/post/40335Fri, 10 Dec 2021 02:47:20 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Wed, 08 Dec 2021 09:58:18 GMT]]>Hi!

Just to let you good people know: I am head of community at CrowdSec and I think it's a great idea if Cloudron has build-in support for CrowdSec.

I would be happy to help anyone here out in installing it - and of course to facilitate Cloudron the help they would need to implement it.

Just DM me or write me at klaus (at) crowdsec (dot) net.

]]>https://forum.cloudron.io/post/40279https://forum.cloudron.io/post/40279Wed, 08 Dec 2021 09:58:18 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Sun, 05 Dec 2021 04:14:07 GMT]]>@teamcrw I realized crowdsec isn't succesfully parsing the NGINX logs generated by cloudron because Cloudron uses a non standard /non default log format for NGINX. Working on that now.

]]>https://forum.cloudron.io/post/40141https://forum.cloudron.io/post/40141Sun, 05 Dec 2021 04:14:07 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Wed, 01 Dec 2021 22:34:12 GMT]]>@mastadamus no didn't install nginx bouncer with it. i didn't encounter any problems since i installed it with default settings.

]]>https://forum.cloudron.io/post/40002https://forum.cloudron.io/post/40002Wed, 01 Dec 2021 22:34:12 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 26 Nov 2021 04:22:23 GMT]]>@mastadamus The IP TABLE bouncer seems to be working fine. Also I installed the metabase Docker container running on 8181 with success.

]]>https://forum.cloudron.io/post/39819https://forum.cloudron.io/post/39819Fri, 26 Nov 2021 04:22:23 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Fri, 26 Nov 2021 03:23:06 GMT]]>@mastadamus I'd like to give an update. I installed the NGINX bouncer and it took down cloudron's NGINX service. During the install it prompted me if i wanted to change several config files or leave the current file in place and I left my current config file in place yet it still crashed and refused to come back up. More investigation is necessary to make this work.

]]>https://forum.cloudron.io/post/39818https://forum.cloudron.io/post/39818Fri, 26 Nov 2021 03:23:06 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Thu, 25 Nov 2021 14:56:03 GMT]]>@teamcrw are you installing an nginx bouncer with it?

]]>https://forum.cloudron.io/post/39777https://forum.cloudron.io/post/39777Thu, 25 Nov 2021 14:56:03 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Wed, 24 Nov 2021 14:32:27 GMT]]>@teamcrw i just installed it now and will get back if i encounter any problems

]]>https://forum.cloudron.io/post/39732https://forum.cloudron.io/post/39732Wed, 24 Nov 2021 14:32:27 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Wed, 24 Nov 2021 14:26:28 GMT]]>Did anyone install it on a cloudron instance? We are using it on various Ubuntu rootservers and it works.

]]>https://forum.cloudron.io/post/39731https://forum.cloudron.io/post/39731Wed, 24 Nov 2021 14:26:28 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Sun, 21 Nov 2021 00:23:29 GMT]]>@privsec Have you installed this with your cloudron?

]]>https://forum.cloudron.io/post/39559https://forum.cloudron.io/post/39559Sun, 21 Nov 2021 00:23:29 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Mon, 15 Nov 2021 12:36:34 GMT]]>For me, the nicer part of that project is they have "crowdsec client" which it is able to listen inside the docker habitat and with the bouncer apply rules at the host level.

@privsec you should change the title since in that case it would replace more than just Fail2Ban and protect more than just SSH.

]]>https://forum.cloudron.io/post/39304https://forum.cloudron.io/post/39304Mon, 15 Nov 2021 12:36:34 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Sun, 14 Nov 2021 01:27:11 GMT]]>To unban yourself, if you do
https://crowdsec.net/unban-my-ip/

]]>https://forum.cloudron.io/post/39247https://forum.cloudron.io/post/39247Sun, 14 Nov 2021 01:27:11 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Sun, 14 Nov 2021 01:22:59 GMT]]>To add to how awesome this software is

https://crowdsec.net/faq/

Server-side treatments involve the following:

    Collecting information (IP / Timestamp / Scenario) sent by the network members accepting to share them
    Distributing curated IP block list (tailor-made for each, according to their choices in the back office (coming soon))

The reputation system (feeding your local daemon with IPs to block), can be deactivated and/or replaced by another source of reputation in the configuration, making the software 100% able to function in a standalone manner if you want absolutely no dependency on any online service. With the local API (LAPI, as of v1.0) agents can be deployed & configured 100% offline if you want to.
]]>https://forum.cloudron.io/post/39246https://forum.cloudron.io/post/39246Sun, 14 Nov 2021 01:22:59 GMT<![CDATA[Reply to Implement Crowdsec, a docker and sever level crowd sourced security guard on Sat, 13 Nov 2021 21:56:52 GMT]]>@privsec huge fan of this idea.

]]>https://forum.cloudron.io/post/39235https://forum.cloudron.io/post/39235Sat, 13 Nov 2021 21:56:52 GMT