- Add secubox-app-crowdsec-custom package with: - HTTP auth bruteforce detection - Path scanning detection - LuCI/uhttpd auth monitoring - Trusted IP whitelist for private networks - Fix Lyrion Docker image path to ghcr.io/lms-community/lyrionmusicserver:stable Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
18 lines
313 B
YAML
18 lines
313 B
YAML
# CrowdSec acquisition for SecuBox/LuCI authentication
|
|
# Monitors syslog for auth failures
|
|
|
|
# Monitor OpenWrt syslog
|
|
source: file
|
|
filenames:
|
|
- /var/log/messages
|
|
- /tmp/log/messages
|
|
labels:
|
|
type: syslog
|
|
---
|
|
# Monitor auth.log if available
|
|
source: file
|
|
filenames:
|
|
- /var/log/auth.log
|
|
labels:
|
|
type: syslog
|