Linking Crowdsec with Dockerized Caddy
Solved
Container
LinuxHiya folks, brand spankin new to Crowdsec, and I really like the look of everything but am currently quite overwhelmed.
I have a server at home that I have exposed on port 443 to the internet to host a simple site. The server is running the application inside of a docker container, and is proxied through Caddy on the same VM which is also in a docker container. I have installed the Crowdsec agent on the VM itself, and it is up and running and able to connect to the Crowdsec API.
I'm struggling to figure out how to get the agent to view the logs for Caddy. I have configured my caddyfile to log requests to the docker logs. I have also instealled the
I am not seeing any reports in the crowdsec logs, and trying to make my way through the documentation has been leaving me more confused than before, so I figured I would ask for help and guidance for how to get this set up. I would ideally like to configure the Caddy remediation component as well, but I have to set up the detection correctly first hahaha. Help is greatly appreciated!
EDIT:
Seems like crowdsec is seeing the logs but not parsing them correctly. The log is filled with:
every time a request is logged in the Caddy container.
I have a server at home that I have exposed on port 443 to the internet to host a simple site. The server is running the application inside of a docker container, and is proxied through Caddy on the same VM which is also in a docker container. I have installed the Crowdsec agent on the VM itself, and it is up and running and able to connect to the Crowdsec API.
I'm struggling to figure out how to get the agent to view the logs for Caddy. I have configured my caddyfile to log requests to the docker logs. I have also instealled the
crowdsecurity/docker-logscrowdsecurity/caddysetup.caddy.yamlacquis.dI am not seeing any reports in the crowdsec logs, and trying to make my way through the documentation has been leaving me more confused than before, so I figured I would ask for help and guidance for how to get this set up. I would ideally like to configure the Caddy remediation component as well, but I have to set up the detection correctly first hahaha. Help is greatly appreciated!
EDIT:
Seems like crowdsec is seeing the logs but not parsing them correctly. The log is filled with:
every time a request is logged in the Caddy container.
