Kinda pulling my hair out... running crowdsec in docker and recently switched to NPMplus (Nginx Proxy Manager) ... the access and error log files from Nginx show up and I can tail -f from within the container to see traffic showing up.
In the crowdsec logs it appears to have configured correctly (screenshot attached)
I've checked cscli config and the directories show properly with my acquis.d/npmplus.yaml file (as well as 3 others, none of which show either...)
Config screenshot attached.
npmplus.yaml screenshot attached which is in /etc/crowdsec/acquis.d
Note I don't have a file "/etc/crowdsec/acquis.yaml" - I've tried with and without that file, and commenting out the file in the main config yaml.
I've installed the collection for NPM plus. What's been eating away at me is that the logs appear they're configuring correctly, no errors.
I've even installed the crowdsec collection for nginx and nginx-proxy-manager and made acquisition files, no luck. I've also been restarting the container between each of these changes to test.
Appreciate any other ideas people may have.