lua-cs-bouncer

Lua module to allow ip (or not) from CrowdSec API.

Install & Config

git clone https://github.com/crowdsecurity/lua-cs-bouncer.git

Install script

sudo ./install.sh

⚠️ the installation script works only on Debian/Ubuntu

From source

Requirements

 apt-get install lua5.3
 apt-get install lua-sec

With make

sudo make install

Manually

• Create folder /usr/local/lua/crowdsec/:

mkdir -p /usr/local/lua/crowdsec/

• Copy the lua-cs-bouncer/lib/*.lua into /usr/local/lua/crowdsec/:

cp ./lua-cs-bouncer/lib/*.lua /usr/local/lua/crowdsec

• Copy the lua-cs-bouncer/template.conf into /usr/local/lua/crowdsec/crowdsec.conf:

cp ./lua-cs-bouncer/template.conf /usr/local/lua/crowdsec/crowdsec.conf

Configuration

The configuration is located by default in /usr/local/lua/crowdsec/crowdsec.conf:

API_URL=http://localhost:8080                 <-- the API url
API_KEY=                                      <-- the API Key generated with `cscli bouncers add -n <bouncer_name>` 
LOG_FILE=/var/log/crowdsec_lua_bouncer.log    <-- path to log file 
LOG_LEVEL=INFO                                <-- log level (INFO, WARN, DEBUG, ERROR, FATAL)
CACHE_EXPIRATION=1                            <-- in seconds
CACHE_SIZE=1000                               <-- cache size
REQUEST_TIMEOUT=0.2                           <-- Maximum duration in seconds for a request to LAPI