secubox-openwrt/package/secubox/secubox-app-crowdsec-custom/files/acquis.d/secubox-auth.yaml
CyberMind-FR 3e52444a73 feat(crowdsec): Add custom CrowdSec scenarios package for SecuBox
- Add secubox-app-crowdsec-custom package with:
  - HTTP auth bruteforce detection
  - Path scanning detection
  - LuCI/uhttpd auth monitoring
  - Trusted IP whitelist for private networks
- Fix Lyrion Docker image path to ghcr.io/lms-community/lyrionmusicserver:stable

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-22 14:50:36 +01:00

18 lines
313 B
YAML

# CrowdSec acquisition for SecuBox/LuCI authentication
# Monitors syslog for auth failures
# Monitor OpenWrt syslog
source: file
filenames:
- /var/log/messages
- /tmp/log/messages
labels:
type: syslog
---
# Monitor auth.log if available
source: file
filenames:
- /var/log/auth.log
labels:
type: syslog