Share CrowdSec bans and mitmproxy detections between mesh nodes using the existing blockchain chain + gossip sync. Received IOCs from trusted peers are auto-applied as CrowdSec decisions based on a three-tier trust model (direct/transitive/unknown). Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
69 lines
1.6 KiB
Plaintext
69 lines
1.6 KiB
Plaintext
config p2p 'main'
|
|
option enabled '1'
|
|
option node_name ''
|
|
option discovery_enabled '1'
|
|
option discovery_method 'mdns'
|
|
option sharing_enabled '1'
|
|
option auto_sync '1'
|
|
option sync_interval '60'
|
|
# Multi-address mesh support
|
|
option advertise_wan '1'
|
|
option advertise_wireguard '1'
|
|
option prefer_wireguard '1'
|
|
|
|
config dns_federation 'dns'
|
|
option enabled '0'
|
|
option primary_dns '127.0.0.1:53'
|
|
option sync_enabled '1'
|
|
option base_domain 'sb.local'
|
|
|
|
config wireguard_mesh 'wireguard'
|
|
option enabled '0'
|
|
option listen_port '51820'
|
|
option network_cidr '10.100.0.0/24'
|
|
option auto_configure '1'
|
|
|
|
config haproxy 'haproxy'
|
|
option enabled '0'
|
|
option strategy 'round-robin'
|
|
option health_check '1'
|
|
option failover '1'
|
|
|
|
config hub_registry 'registry'
|
|
option base_url 'sb.local'
|
|
option cache_enabled '1'
|
|
option cache_ttl '300'
|
|
|
|
config maas 'maas'
|
|
option enabled '0'
|
|
option auto_register '1'
|
|
option sync_interval '60'
|
|
|
|
config gitea 'gitea'
|
|
option enabled '0'
|
|
option server_url ''
|
|
option repo_name 'secubox-backup'
|
|
option repo_owner ''
|
|
option access_token ''
|
|
option auto_backup '0'
|
|
option backup_interval '3600'
|
|
option backup_on_change '1'
|
|
option include_configs '1'
|
|
option include_packages '1'
|
|
option include_scripts '1'
|
|
|
|
config backup 'backup'
|
|
option enabled '1'
|
|
option backup_dir '/etc/secubox/backups'
|
|
option max_backups '10'
|
|
option auto_cleanup '1'
|
|
|
|
config threat_intel 'threat_intel'
|
|
option enabled '1'
|
|
option auto_apply '1'
|
|
option apply_transitive '1'
|
|
option min_severity 'high'
|
|
option collect_interval '900'
|
|
option max_iocs_per_batch '20'
|
|
option ioc_ttl '86400'
|