crowdsec-stack

version: '3'

services:
  app:
    image: traefik/whoami
    restart: always
    networks:
      crowdsec:

  reverse-proxy:
    image: nginx:alpine
    restart: always
    ports:
      - 8090:80
    depends_on:
      - 'app'
    volumes:
      - ~/docker/appdata/reverse-proxy/nginx.conf:/etc/nginx/nginx.conf
    networks:
      crowdsec:

  crowdsec:
    image: crowdsecurity/crowdsec:latest-debian
    restart: always
    networks:
      crowdsec:
    ports:
      - "127.0.0.1:8080:8080"
    environment:
      ## DOCKER_HOST: tcp://socket-proxy:2375
      COLLECTIONS: "crowdsecurity/nginx"
    depends_on:
      - 'reverse-proxy'
    volumes:
      ## Bad pratice to mount docker socket into a container
      # - /var/run/docker.sock:/var/run/docker.sock:ro
      ######################################################
      - ~/docker/appdata/crowdsec/acquis.yaml:/etc/crowdsec/acquis.yaml
      - ~/docker/appdata/crowdsec/data:/var/lib/crowdsec/data/
      - ~/docker/appdata/crowdsec/config:/etc/crowdsec/


  socket-proxy:
    networks:
      crowdsec:
    restart: always
    image: tecnativa/docker-socket-proxy
    container_name: socket-proxy
    environment:
      INFO: 1
      CONTAINERS: 1
      BUILD: 0
      COMMIT: 0
      CONFIGS: 0
      DISTRIBUTION: 0
      EXEC: 0
      GRPC: 0
      IMAGES: 0
      NETWORKS: 0
      NODES: 0
      PLUGINS: 0
      SERVICES: 0
      SESSION: 0
      SWARM: 0
      SYSTEM: 0
      TASKS: 0
      VOLUMES: 0
    volumes:
     - '/var/run/docker.sock:/var/run/docker.sock'

#volumes:
#  crowdsec-db:
#  crowdsec-config:

networks:
  crowdsec:
    driver: bridge