Alfi

joined 1 year ago
[–] Alfi@lemmy.alfi.casa 2 points 1 year ago

Make sure you check which instance you are on. Jerboa will show you lemmy.ml by default (I think?) While other apps probably show lemmy.world by default . Make sure you set the instance to where you actually registered your account.

[–] Alfi@lemmy.alfi.casa 4 points 1 year ago

Pictrs supports object storage, you should look into that at your provider, it should be a lot cheaper than additional disk space

[–] Alfi@lemmy.alfi.casa 1 points 1 year ago* (last edited 1 year ago) (1 children)

Hi,

Reading the thread I decided to give it a go, I went ahead and configured crowdsec. I have a few questions, if I may, here's the setup:

  • I have set up the basic collections/parsers (mainly nginx/linux/sshd/base-http-scenarios/http-cve)
  • I only have two services open on the firewall, https and ssh (no root login, ssh key only)
  • I have set up the firewall bouncer.

If I understand correctly, any attack detected will result in the ip being banned via iptables rule (for a configured duration, by default 4 hours).

  • Is there any added value to run the nginx bouncer on top of that, or any other?
  • cscli hub update/upgrade will fetch new definitions for collections if I undestand correctly. Is there any need to run this regularly, scheduled with let's say a cron job, or does crowdsec do that automatically in the background?
[–] Alfi@lemmy.alfi.casa 2 points 1 year ago

Hi, did you edit the .yml and set a valid domain name? Also, check that you didn't edit the internal references in the nginx yml (the comments in the file warn about this).