Questions on Crowdsec multi-device setup

[thibault]

Hello @elgringo !

Welcome onboard

@elgringo

1- Should all the bouncers and agents be under the same instance or not?

You don’t necessarily have to. If it’s various “layers” protecting the same component, having separate instances works too. The good point of using one instance w/ all your bouncers and agents is that they all share the same decisions.

@elgringo

2- If not I assume that I can leave the setup the way it is and it will be fine?

Yes

@elgringo

my question then would be should this be running standalone of should it be added to my current Swag reverse proxy stack that already has Swag, Authelia and the current bouncer you can the on the left of the image

Not sure I figured out your exact setup, but I guess having the CF bouncer attached to the instances that process your web logs makes sense.

@elgringo

3- Can I easily remove a bouncer from an instance to either move it to a different instance or delete it completely?

Yes, you can use cscli bouncers to add / remove API keys. When changing to which LAPI a bouncer is attached, remember that you need to edit its config file too !

@elgringo

4- I see on that app.crowdsec.net page that the Opnsense instance is using agent version v.1.4.1 and that V.1.4.3 is available but despite having tried to run and update of the different elements from the Opnsense UI which didn’t worked, I haven’t found a way to get this updated, so what’s the best way to do this, should I just removed all together and restart from scratch?

We’re waiting for 1.4.3 to be merged into opnsense too

Cheers,