Updating Decisions List

Hello I just setup crowdsec for the first time. Is it normal for the
cscli decision list
cscli decision list
to be different from
cscli decisions list --origin CAPI
cscli decisions list --origin CAPI
? I'm using the container maintained by Zoey. docker.io/zoeyvid/npmplus:latest
10 Replies
CrowdSec
CrowdSec2w ago
Important Information
This post has been marked as resolved. If this is a mistake please press the red button below or type /unresolve
© Created By WhyAydan for CrowdSec ❤️
iiamloz
iiamloz2w ago
because cscli decisions list only shows local made decisions, using a filter like --origin CAPI includes the community blocklist so will show items that are hidden by default.
Panzhunter
PanzhunterOP2w ago
That makes sense thank you! One other question is modsecurity required? It's included in the docker image I'm using from Zoe but it causes issues with many of my services, nextcloud not showing files and not being able to add passwords to bitwarden, so I want to disable it.
iiamloz
iiamloz2w ago
Nope modsecurity is not maintained or managed by us, Zoey includes it as an option for a WAF but can be disabled and you can just use crowdsec. We do have a appsec component but that doesnt need to be enabled.
Panzhunter
PanzhunterOP7d ago
Glad to hear it thank you! You wouldn't know how to disable it would you? When I check github discussions it seems like that is the solution to a few similar problems but I'm not seeing how to disable it Example were the solution is to disable it but there they don't say how they did it https://github.com/ZoeyVid/NPMplus/discussions/1841
GitHub
Issues with Firefly and Beszel · ZoeyVid NPMplus · Discussion #1841
Hello, I have recently transitioned from using Cloudflare tunnels with NPM + Crowdsec to the same config with NPM Plus. I have one issue that is not present when using the regular NPM stack - I can...
iiamloz
iiamloz7d ago
I believe you go via the UI on the domain you defined, and within the options is modsecurity
Panzhunter
PanzhunterOP7d ago
In nginx or my crowdsec account? In nginx or my crowdsec account?
iiamloz
iiamloz7d ago
within nginx proxy manager UI
Panzhunter
PanzhunterOP7d ago
Oh let me double check then. I was looking in conf files I see it now. Thanks again for your help and for the quick replies!
CrowdSec
CrowdSec7d ago
Resolving Updating Decisions List This has now been resolved. If you think this is a mistake please run /unresolve

Did you find this page helpful?