Try to implement crowdsec everywhere, connected to central lapi

services/nginx/default.nix

@@ -15,12 +15,6 @@ in {
     };
   };
   config = lib.mkIf cfg.enable {
-    age.secrets = {
-      cs-lapi-key = {
-        file = ./secrets/cs-lapi-key.age;
-        owner = "crowdsec";
-      };
-    };
     security.acme = {
       acceptTerms = true;
       defaults.email = "theo.barnouin@le43.eu";
@@ -34,14 +28,10 @@ in {
         package = inputs.crowdsec.packages."x86_64-linux".crowdsec-firewall-bouncer;
         settings = {
           api_key = "XIgNVuxdP74m+UPbd3WJnHHJdLhRiTbhuH6z2mPRIFg";
-          api_url = "http://127.0.0.1:8080";
+          api_url = "http://${cfg.proxy_ip}:8080";
         };
       };
       crowdsec = {
-        enable = true;
-        package = pkgs.crowdsec;
-        autoUpdateService = false;
-        openFirewall = true;
         settings = {
           general = {
             api = {
@@ -50,19 +40,14 @@ in {
                 listen_uri = "${cfg.proxy_ip}:8080";
               };
             };
-            prometheus.listen_addr = "0.0.0.0";
           };
-          lapi.credentialsFile = "${config.age.secrets.cs-lapi-key.path}";
         };
         hub.collections = [
           "firix/authentik"
           "crowdsecurity/sshd"
           "crowdsecurity/linux"
           "crowdsecurity/nginx"
-          "LePresidente/grafana"
-          "LePresidente/jellyfin"
           "crowdsecurity/http-cve"
-          "crowdsecurity/nextcloud"
           "crowdsecurity/base-http-scenarios"
         ];
         localConfig = {

services/nginx/secrets/cs-lapi-key.age

@@ -1,13 +1,13 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9Xa1ZYdyBPc0Q4
-UU1TbDBWL3RKQ2VQRDZncE9sZC8vVVdESzYxNkQ0amoySFdNZFRJClVpS3ZaeFhP
-WVNpQXJQbWp2aDMyMldkdVczdkZCTU5McFpRMTN6NXBtQkkKLT4gc3NoLWVkMjU1
-MTkgbXUwZm5BIFlxK0RKY0plTmtGV2FYZHBUMjlVa1FwYkRkalVyUEsvREJ3VmFz
-SXVUVWMKZGF1eW9MbkhuajU5aFhHcml4TDVHQVZtZ1ZDbXIzdXRXNERmOGtkYm50
-NAotPiBGLWdyZWFzZSBaUnNXYQo0U0ovMWZTaXhZdy96dWRpY1lud3V3cFNoSnFS
-WExsWEs5VVI2NG5XcHI4eVlJWFZoQVpCVEs2QnkxT3p6b01RCmIrbjZVTWU5U2VV
-VHpTcVIxM01ECi0tLSBqV0ZTbndQU2xQMjcwQUxRR1dCQ2JsSnlpUzlrMmRVUXRH
-aytLOStjYmJnCg2ocDo5O53RoiV3p9kGD+NulQKb1+01Ay1R2W0Upcgpu132Rexy
-nwUvMrRbPgWUdgeUjkhKJ/ZR1gCVEav38aUsZugs39ndLYOwpluw5lUs+i2piB7k
-rOC+NhPXSXJLMb4vKdkkioJehv+VbSZ9M4PW2vbsziQAhfWErm7RAi/FvtoUdypT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 -----END AGE ENCRYPTED FILE-----