Security
CrowdSec
Adds the official CrowdSec package repository (key fingerprint checked), installs the engine (local API on 127.0.0.1:8080) and, if chosen, the nftables firewall bouncer, and starts both. The bouncer adds its own nftables table and never changes default firewall policies or ufw rules. The address that ran this installation, and any you list, are allowlisted. Not enrolled in the online console.
What it does
Security Tool Installers
What you will be asked
You fill these in during setup.
- Install the firewall bouncer RequiredAdvanced settingsWhen true, the nftables firewall bouncer is installed so attackers are actually blocked. When false only the detection engine is installed and nothing blocks traffic. The bouncer adds its own nftables table and does not change default firewall policies.
- Addresses that are never banned OptionalAdvanced settingsOptional. Your own IP address (or several, or ranges), separated by commas, for example 203.0.113.5,198.51.100.0/24. The address that ran this installation is allowlisted automatically, but that is the address of the system that runs the script, not necessarily yours.