How to install Crowdsec on Proxmox VE 8 correct
This article describes how to install crowdsec on an proxmox ve environment. Only 5 Steps are required.
Crowdsec is the new Fail2ban and should be preferred today due to decentralization alone. Fail2ban has been on the market for a long time and is therefore indispensable for Proxmox installations, but the good new alternative Crowdsec is a bit better.
Here now follows the instructions how to add Crowdsec on a Proxmox VE 8.0 installation.
NOTE: Even if Fail2ban is already installed on your system, you can easily add Crowdsec. For new installations please use Crowdsec only.
How to install
Crowdsec Repository
The first thing to do is to add the Crowdsec repository.
curl -s https://packagecloud.io/install/repositories/crowdsec/crowdsec/script.deb.sh | sudo bashInstall Crowdsec
Crowdsec will be installed on the system
sudo apt install crowdsecAdd firewall IPTables bouncer
The bouncer is responsible for keeping the lists for the IPTables up to date.
sudo apt install crowdsec-firewall-bouncerSmall change in the configuration for the SQLite database
Add the "use_wal: true" in the area "db_config".
File: nano /etc/crowdsec/config.yaml
db_config:
log_level: info
type: sqlite
db_path: /var/lib/crowdsec/data/crowdsec.db
use_wal: trueReady
Start the software with the following command. Autostart is already enabled here.
service crowdsec startOptional - Crowdsec Dashboard
Additionally you can add the agent to the Crowdsec Dashboard. To do this, log in to Crowdsec on the website and create a new engine. There you will get an enroll code which you have to execute on the console. Here is an example:
sudo cscli console enroll cljpek1420011mn088ta9y2xnA DynDNS Service from IPv64.net
The DynDNS service of IPv64.net is free of charge and usable in all common routers and systems.
You have the choice between many different domain names.
Healthcheck und Monitoring Service
The IPv64.net Healthchecks monitor your services, servers and endpoints. Receive notifications when your services fail.
This monitoring service is free with all features.
Register now
Registration with IPv64 is free of charge and immediately available for you.
