🐳 pangolin

Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.

Docker Ready 1 Services Ports: 6060 22,265 stars
Docs Apps Skills GitHub
1. Pull Image docker pull docker.io/crowdsecurity/crowdsec
2. 1-Click Launch Command docker run -d -p 6060:6060 --name pangolin docker.io/crowdsecurity/crowdsec:latest
3. Compose Deployment docker compose up -d
install/config/crowdsec/docker-compose.yml
Download .yml 
services:
  crowdsec:
    image: docker.io/crowdsecurity/crowdsec:latest
    container_name: crowdsec
    environment:
      GID: "1000"
      COLLECTIONS: crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules
      ENROLL_INSTANCE_NAME: "pangolin-crowdsec"
      PARSERS: crowdsecurity/whitelists
      ENROLL_TAGS: docker
    healthcheck:
        test:
            - CMD
            - cscli
            - lapi
            - status
        interval: 10s
        timeout: 5s
        retries: 3
        start_period: 30s
    labels:
      - "traefik.enable=false" # Disable traefik for crowdsec
    volumes:
      # crowdsec container data
      - ./config/crowdsec:/etc/crowdsec # crowdsec config
      - ./config/crowdsec/db:/var/lib/crowdsec/data # crowdsec db
      # log bind mounts into crowdsec
      - ./config/traefik/logs:/var/log/traefik # traefik logs
    ports:
      - 6060:6060 # metrics endpoint for prometheus
    restart: unless-stopped
    command: -t # Add test config flag to verify configuration