SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 14:01:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

crowdsec: Fix journalctl acquisitions

Browse source 
After spending an hour figuring this out on my own, I found this https://codeberg.org/kampka/nix-flake-crowdsec/issues/20 :(
This commit is contained in:
SebastianStork 2025-10-15 20:44:41 +02:00
parent 1fc98070f1
commit 344baa5f46
1 changed files with 48 additions and 47 deletions
Download patch file Download diff file Expand all files Collapse all files

23
modules/system/services/crowdsec/default.nix
View file

@ -57,15 +57,7 @@ in
};
allowLocalJournalAccess = true;
acquisitions =
let
mkJournalAcquisition = unit: {
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_UNIT=${unit}" ];
labels.type = "syslog";
};
in
[
acquisitions = [
(lib.mkIf cfg.sources.iptables {
source = "journalctl";
journalctl_filter = [ "-k" ];
@ -75,11 +67,19 @@ in
filenames = [ "${config.services.caddy.logDir}/*.log" ];
labels.type = "caddy";
})
(lib.mkIf cfg.sources.sshd (mkJournalAcquisition "sshd.service"))
(lib.mkIf cfg.sources.sshd {
source = "journalctl";
journalctl_filter = [ "_SYSTEMD_UNIT=sshd.service" ];
labels.type = "syslog";
})
];
};
systemd.services.crowdsec.serviceConfig.ExecStartPre =
systemd.services.crowdsec.serviceConfig = {
# Fix journalctl acquisitions
PrivateUsers = false;
ExecStartPre =
let
installCollection = collection: ''
if ! cscli collections list | grep -q "${collection}"; then
@ -106,6 +106,7 @@ in
|> mkScript "crowdsec-install-collections";
in
lib.mkAfter collectionsScript;
};
custom.persist.directories = [ "/var/lib/crowdsec" ];
};