Use without pangolin? (crowdsec_manager discussion #10)

:speech_balloon: GitHub discussion crowdsec_manager #10 in Q&A, started by FoxxMD on GitHub

This interface looks awesome and I would love to use it but I don’t use pangolin.

I am using Traefik + crowdsec plugin + crowdsec lapi (docker instance) + a couple crowdsec child processors (docker instances doing logs only). Could I still use this?


:speech_balloon: Join in here or on GitHub.

hhftechnology commented on GitHub:

you can but the container will cry that it is missing pangolin, and you are willing to ignore it. few other features might not be available-like update etc.
you will have manage file paths.

CrazyWolf13 commented on GitHub:

I’d be also really interested in this, I’m coming from the selfh.st newsletter and this sounds really awesome, though I’m running zoraxy as my reverse proxy.

TheBig-O commented on GitHub:

few other features might not be available-like update etc.

Can you explain this a bit more. I’d really like to spin up the crowdsec_manager, but really don’t want to start inadvertently hosing my system by introducing Pangolin. i have no current need for it and wouldn’t otherwise install it.
Thanks for putting this together. I hope I can sort out a way to use it.

hhftechnology replied in a thread on GitHub to CrazyWolf13:

@​CrazyWolf13 i will be coming with multi proxy after V1. i have already being coding hard on this.

CrazyWolf13 replied in a thread on GitHub to CrazyWolf13:

:rocket:

TheBig-O commented on GitHub:

Any update to this?

hhftechnology replied in a thread on GitHub to CrazyWolf13:

@​CrazyWolf13 just off topic, one the mods from your subreddit marked my content as advertised. The audience says to link old posts and projects related to traefik so I linked , I don’t they downvote .. I have removed all my content from your subreddit. I have never taken a single donation or penny from anyone. Nor projects nor users . I have also left the community.

People post so many useless things and everything slides and real people who serve are treated like this .. sad …

CrazyWolf13 replied in a thread on GitHub to CrazyWolf13:

@​hhftechnology I’m a bit unsure what you are talking about?

What subreddit are you referring to?
I don’t own any.

I’m not affiliated to selfhst newsletter in any way, I was just saying I came from it via a link in hthat newsletter.

hhftechnology replied in a thread on GitHub to CrazyWolf13:

My bad , I thought you ran the newsletter.

hhftechnology replied in a thread on GitHub to CrazyWolf13:

Anyways we have removed all the contents from their subreddit. We will have our own newsletter. We will test and vet open-source software and send it monthly to all users and subscribers to our forum. 4000 are enough.

Please do subscribe and create an account on our forum.

hhftechnology commented on GitHub:

@​FoxxMD @​TheBig-O @​CrazyWolf13

Without pangolin or traefik, mobile app also coming.

APP Link - https://play.google.com/store/apps/details?id=com.crowdsec.manager.independent
to helps us get involved as testers send us your playstore email address on our discord.

services:
  tailscale:
    image: tailscale/tailscale:latest
    container_name: tailscale-crowdsec
    hostname: crowdsec-manager-ts # The name that will appear in your Tailscale admin panel
    environment:
      - TS_AUTHKEY=
      - TS_STATE_DIR=/var/lib/tailscale
    volumes:
      - tailscale-data:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - net_admin
      - sys_module
    ports:
      - "8080:8080"
    networks:
      pangolin:
        aliases:
          - crowdsec-manager # Ensures other containers on the network can still reach it by its original name!
    restart: unless-stopped

  crowdsec-manager:
    image: hhftechnology/crowdsec-manager:independent
    container_name: crowdsec-manager-independent
    network_mode: service:tailscale # This is the magic: it merges networking with the Tailscale container
    depends_on:
      - tailscale
    restart: unless-stopped
    # 'expose' and 'networks' are removed here because Tailscale manages the network connection now
    environment:
      - PORT=8080
      - ENVIRONMENT=production
      - CONFIG_DIR=/app/config
      - DATABASE_PATH=/app/data/settings.db
      - INCLUDE_CROWDSEC=true
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./config:/app/config
      - ./logs/app:/app/logs
      - ./data:/app/data

networks:
  pangolin:
    external: true

volumes:
  tailscale-data:

External Image

CrazyWolf13 replied in a thread on GitHub to hhftechnology:

Thanks!

Looks very interesting, currently a bit busy, but I’ll check it out!
Is bare metal (dockerless) supported?

hhftechnology replied in a thread on GitHub to hhftechnology:

you will have to build it manual and run it. yes, why not. its just vite. i run it on my test bench without docker

TheBig-O commented on GitHub:

Awesome! Thanks for making these changes. I’ve never used Tailscale, but I’m going to spin up the stack and give Crowdsec Manager a go!

FoxxMD replied in a thread on GitHub to hhftechnology:

Thank you for the effort on getting this working! It took me awhile to figure out it needed docker api access and specifically looks for a container named crowdsec.

hhftechnology replied in a thread on GitHub to hhftechnology:

@​FoxxMD i am working on detailed docs and videos so there will less pain to deploy. now for next two months that’s the task. no new features. mobile app was a constant request from my forum users.