[PR #91] [MERGED] feat: Add CrowdSec as optional alternative to fail2Ban #92

New issue

Closed

opened 2026-03-02 02:59:46 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 02:59:46 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/buildplan/du_setup/pull/91
Author: @buildplan
Created: 1/12/2026
Status: ✅ Merged
Merged: 1/12/2026
Merged by: @buildplan

Base: main ← Head: crowdsec

📝 Commits (5)

992b24f CrowdSec as an option instead of fail2ban
b7d0ae4 crowdsec to process ufw logs parity with f2b.
2c46072 improve help from CrowdSec
1ac6942 checksum v0.79.1
d2aaedc version and checksum

📊 Changes

3 files changed (+170 additions, -17 deletions)

View changed files

📝 README.md (+5 -4)
📝 du_setup.sh (+164 -12)
📝 du_setup.sh.sha256 (+1 -1)

📄 Description

Added CrowdSec as a selectable Intrusion Detection System (IDS) alongside fail2Ban.

IDS Selection: Users can now choose between Fail2Ban, CrowdSec, or skipping IDS setup entirely during the interactive prompt.
CrowdSec Setup: Implemented configure_crowdsec to handle repository setup, agent installation, and the firewall bouncer (iptables/UFW).
Log Parity: Configured CrowdSec to actively monitor /var/log/ufw.log, ensuring parity with the existing Fail2Ban configuration.
Refactor: Moved IDS package installation out of the base package list to support conditional installation.
Reporting: Updated generate_summary to dynamically display the status, metrics, and bans for the specific IDS selected.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/buildplan/du_setup/pull/91 **Author:** [@buildplan](https://github.com/buildplan) **Created:** 1/12/2026 **Status:** ✅ Merged **Merged:** 1/12/2026 **Merged by:** [@buildplan](https://github.com/buildplan) **Base:** `main` ← **Head:** `crowdsec` --- ### 📝 Commits (5) - [`992b24f`](https://github.com/buildplan/du_setup/commit/992b24f704f1635aae4a03701b6bc5679a351616) CrowdSec as an option instead of fail2ban - [`b7d0ae4`](https://github.com/buildplan/du_setup/commit/b7d0ae4bae1691c3cf48b01a4e934dcdcffee773) crowdsec to process ufw logs parity with f2b. - [`2c46072`](https://github.com/buildplan/du_setup/commit/2c4607294fda0a6c559032d219363740dcd7a596) improve help from CrowdSec - [`1ac6942`](https://github.com/buildplan/du_setup/commit/1ac69424da677af96095e20618b955b147d0d130) checksum v0.79.1 - [`d2aaedc`](https://github.com/buildplan/du_setup/commit/d2aaedcc33b313d92877e6f31a0f4fe1bba321df) version and checksum ### 📊 Changes **3 files changed** (+170 additions, -17 deletions) <details> <summary>View changed files</summary> 📝 `README.md` (+5 -4) 📝 `du_setup.sh` (+164 -12) 📝 `du_setup.sh.sha256` (+1 -1) </details> ### 📄 Description Added CrowdSec as a selectable Intrusion Detection System (IDS) alongside fail2Ban. * **IDS Selection:** Users can now choose between Fail2Ban, CrowdSec, or skipping IDS setup entirely during the interactive prompt. * **CrowdSec Setup:** Implemented `configure_crowdsec` to handle repository setup, agent installation, and the firewall bouncer (iptables/UFW). * **Log Parity:** Configured CrowdSec to actively monitor `/var/log/ufw.log`, ensuring parity with the existing Fail2Ban configuration. * **Refactor:** Moved IDS package installation out of the base package list to support conditional installation. * **Reporting:** Updated `generate_summary` to dynamically display the status, metrics, and bans for the specific IDS selected. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>