services:
  crowdsec:
      image: crowdsecurity/crowdsec
      container_name: crowdsec
      environment:
        GID: "${GID-1000}"
        COLLECTIONS: "crowdsecurity/traefik crowdsecurity/http-cve"
      volumes:
        #- ./config/config.yaml:/etc/crowdsec/config.yaml
        - ./config/acquis.yaml:/etc/crowdsec/acquis.yaml
        - ./config/whitelists:/etc/crowdsec/parsers/s02-enrich/
        - crowdsec-db:/var/lib/crowdsec/data/
        - crowdsec-config:/etc/crowdsec/
        - traefik_traefik-logs:/var/log/traefik/:ro
      labels:
        - com.centurylinklabs.watchtower.monitor-only=true
      restart: unless-stopped
      networks:
        frontend:
          ipv4_address: 172.18.99.90

  bouncer-traefik:
    image: fbonalair/traefik-crowdsec-bouncer:latest
    container_name: bouncer-traefik
    environment:
      - CROWDSEC_BOUNCER_API_KEY=${BOUNCER_API_KEY}
      - CROWDSEC_AGENT_HOST=${AGENT_HOST}
      - PORT=8080
    networks:
      frontend:
        ipv4_address: 172.18.99.91
    depends_on:
      - crowdsec
    labels:
      - com.centurylinklabs.watchtower.monitor-only=true
    restart: unless-stopped

volumes:
  crowdsec-db:
  crowdsec-config:
  traefik_traefik-logs:
    external: true

networks:
  frontend:
    external: true