C

CrowdSec•7mo ago•

4 replies

killmasta93

question on issue reading logs from bunkerweb

Hi Currently we configured bunkerweb with crowdsec, and it seems to be working when we manually add the IP address in the crowdsec lapi but it seems to be an issue reading the logs not sure what would be the issue in the parsing

image:
tag: "v1.6.11"

secrets:
username: "bunkerweb"
password: "Passw0rd123!"

agent:
acquisition:
- namespace: bunkerweb
podName: bunkerweb-*
program: nginx
env:
- name: COLLECTIONS
value: "crowdsecurity/nginx"
- name: BOUNCER_KEY_bunkerweb
valueFrom:
secretKeyRef:
name: bunkerweb-settings-secret
key: xxxxxxxxxxxx

appsec:
enabled: true
acquisitions:
- source: appsec
listen_addr: "0.0.0.0:7422"
path: /
appsec_config: crowdsecurity/virtual-patching
labels:
type: appsec
env:
- name: COLLECTIONS
value: "crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules"

lapi:
enabled: true
env:
- name: BOUNCER_KEY_bunkerweb
valueFrom:
secretKeyRef:
name: bunkerweb-settings-secret
key: xxxxxxxxxxxx
``