Eduardo David Paredes Vara
634028d508
Remove stacks no longer in use: ghost, ghost-me, changedetection, pdf (Stirling PDF), it (IT-Tools), finance (Actual Budget), bookstack, dozzle, beszel, memos, vikunja, onetimesecret and DEPRECATED-kasm. CrowdSec keeps only the engine (the Traefik bouncer is unchanged). Drop Grafana, Prometheus, crowdsec-postgres and metrics-export.sh, which only fed the local dashboard; CrowdSec itself uses SQLite. Also drop references to these services, THSCom, Scheduler and the SpinTools OpenProject from Kopia paths/dumps and ops-report endpoints, and replace the DEPRECATED- convention in the README with the removal procedure used here. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
42 lines
938 B
YAML
42 lines
938 B
YAML
services:
|
|
crowdsec:
|
|
image: ${CROWDSEC_IMAGE}
|
|
container_name: crowdsec
|
|
restart: unless-stopped
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- NET_BIND_SERVICE
|
|
environment:
|
|
COLLECTIONS: ${CROWDSEC_COLLECTIONS}
|
|
BOUNCER_KEY_TRAEFIK: ${CROWDSEC_BOUNCER_API_KEY}
|
|
LEVEL: ${CROWDSEC_LOG_LEVEL}
|
|
TZ: ${TZ:-America/Mexico_City}
|
|
volumes:
|
|
- ${CROWDSEC_CONFIG_PATH}:/etc/crowdsec:Z
|
|
- crowdsec_lib:/var/lib/crowdsec
|
|
- ${TRAEFIK_LOG_PATH}:/var/log/traefik:ro
|
|
- /var/log:/var/log/host:ro
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
expose:
|
|
- "8080"
|
|
- "7422"
|
|
ports:
|
|
- "127.0.0.1:8080:8080"
|
|
networks:
|
|
- proxy
|
|
healthcheck:
|
|
test: ["CMD", "cscli", "lapi", "status"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
|
|
networks:
|
|
proxy:
|
|
external: true
|
|
|
|
volumes:
|
|
crowdsec_lib:
|