Question about docker labels

crowdsec
1

I have an Emby server that I want to protect.
Luckily, I have found this crowdsec collection for it.
I have added the two crowdsec labels and the traefik middlewares label you see here:

    labels:
      traefik.http.routers.emby.tls: true
      traefik.http.routers.emby.middlewares: crowdsec@file
      traefik.http.services.emby.loadbalancer.server.port: 8096
      crowdsec.enable: true
      crowdsec.labels.type: emby

Now my question is: how does crowdsec know how to get to the emby log file? Am I not supposed to provide a filepath for the log?

2

Using docker labels instructs crowdsec to read the stdout of the container, if the logs go to a file then you must mount the file from the container into crowdsec itself. Or if emby supports writing to stdout then set that.

3

I see. Ok. But then do you have any idea what is this LOG_FILE environment variable that is mentioned in the emby collection web page? I’m wondering because cscli metrics show acquisition says none of the 326 lines read for docker:/emby were parsed, so am I correct in guessing it’s not finding the pattern it’s looking for in the emby container stdout?