Error in appSec config

crowdsec
1

Hi,

I’m trying to configure my appsec instance via helm chart, but cannot get it do work:

Values:

appsec:
  enabled: true

  acquisitions:

    - source: appsec

      listen_addr: "0.0.0.0:7422"

      path: /

      appsec_configs:

        - crowdsecurity/appsec-default

        - crowdsecurity/crs

        - crowdsecurity/virtual-patching

        - crowdsecurity/generic-rules

      labels:

        type: appsec

  env:

    - name: COLLECTIONS

      value: "crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-crs crowdsecurity/appsec-generic-rules crowdsecurity/appsec-wordpress"

Logs:

time=“2026-02-04T12:52:31Z” level=warning msg=“169 rules were discarded as they were duplicates” band=inband module=acquisition.appsec runner_uuid=f442f678-b4e7-4594-9a47-819cca74a56f type=appsec
time=“2026-02-04T12:52:31Z” level=fatal msg=“crowdsec init: while loading acquisition config: /etc/crowdsec/acquis.yaml: datasource of type appsec: unable to initialize runner: unable to initialize inband engine : invalid WAF config from string: failed to compile the directive "secrule": duplicated rule id 100”

The pod goes LoopCrashBackOff

Is there too much superposition of collections? How to properly check?

Thank you very much,

2

So crowdsecurity/appsec-default is basically an alias for both crowdsecurity/virtual-patching and crowdsecurity/generic-rules so simply you can remove the latter two and just keep the former.