Hello there, i'm pretty new about crowdsec and I aim to implement it to production with the following statement. We wish to install some bouncers on multiple servers exposed, but we want to send all decisions, and all API request to one main server with LAPI I guess. This main server is register to the console cwrodsec for display some data about it and CTI access. It is the best way to do this for my use case ? I need to add only bouncers and/or machines to my main server ?
Last active 7 months ago
I have a rootless podman container running the crowdsec LAPI in a container alongside the traefik bouncer which are working great. I just set up the opnsense firewall bouncer on a separate host, and I've added these options to point the firewall bouncer to my containerized LAPI: ``` Enable CrowdSec Agent: true Enable CrowdSec Firewall Bouncer: true Additional flags for crowdsec: -no-api LAPI listen address:
LAPI listen port: 8080 ``` Should I now expect to see the firewall host appear on the LAPI host when I list machines `podman exec -it crowdsec cscli machines list`? Am I understanding this correctly?
Last active 8 months ago
Question, is the cscli command line necessary for bouncer only host ? If I use a firewall-bouncer on a host, do I need local cscli command line to do the register or can I do it on the remote agent LAPI host, and the copy only the necessary configs without cscli tool on the bouncer host ?
Last active a year ago