tbarnouin/nixos-hypervisor
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Add redis crowdsec config

Browse source
This commit is contained in:
Théo Barnouin 2025-05-13 14:44:53 +02:00
parent 3fd9c73fc1
commit 0012bcd36b
4 changed files with 47 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

36
services/redis/default.nix
View file

@ -10,14 +10,34 @@ in {
enable = lib.mkEnableOption "Enable minimal config";
};
config = lib.mkIf cfg.enable {
services.redis = {
vmOverCommit = true;
servers.redis = {
enable = true;
port = 6379;
bind = "0.0.0.0";
settings = {
protected-mode = "no";
age.secrets.redis-lapi-key = {
file = ../../secrets/redis-lapi-key.age;
owner = "crowdsec";
};
services = {
crowdsec = {
settings.lapi.credentialsFile = "${config.age.secrets.redis-lapi-key.path}";
localConfig = {
acquisitions = [
{
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_UNIT=redis.service" ];
labels = {
type = "syslog";
};
}
];
};
};
redis = {
vmOverCommit = true;
servers.redis = {
enable = true;
port = 6379;
bind = "0.0.0.0";
settings = {
protected-mode = "no";
};
};
};
};