secubox-openwrt/package/secubox/secubox-app-crowdsec-custom/files/acquis.d/secubox-uhttpd.yaml
CyberMind-FR 3e52444a73 feat(crowdsec): Add custom CrowdSec scenarios package for SecuBox
- Add secubox-app-crowdsec-custom package with:
  - HTTP auth bruteforce detection
  - Path scanning detection
  - LuCI/uhttpd auth monitoring
  - Trusted IP whitelist for private networks
- Fix Lyrion Docker image path to ghcr.io/lms-community/lyrionmusicserver:stable

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-22 14:50:36 +01:00

9 lines
180 B
YAML

# CrowdSec acquisition for SecuBox web interface (uhttpd)
# Monitors uhttpd logs for web attacks
filenames:
- /var/log/uhttpd.log
- /tmp/log/uhttpd.log
labels:
type: syslog