CrowdSec Manager is a web-based management interface for CrowdSec operations, Traefik integration, decisions, scenarios, backups, and logs.

• Current baseline: 2.0.0
• Multi-proxy support: not available in this release

Click below to download the app to your mobile device, tablet:

services: tailscale: image: tailscale/tailscale:latest container_name: tailscale-crowdsec hostname: crowdsec-manager-ts # The name that will appear in your Tailscale admin panel environment: - TS_AUTHKEY= - TS_STATE_DIR=/var/lib/tailscale volumes: - tailscale-data:/var/lib/tailscale - /dev/net/tun:/dev/net/tun cap_add: - net_admin - sys_module ports: - "8080:8080" networks: pangolin: aliases: - crowdsec-manager # Ensures other containers on the network can still reach it by its original name! restart: unless-stopped crowdsec-manager: image: hhftechnology/crowdsec-manager:latest container_name: crowdsec-manager network_mode: service:tailscale # This is the magic: it merges networking with the Tailscale container depends_on: - tailscale restart: unless-stopped # 'expose' and 'networks' are removed here because Tailscale manages the network connection now environment: # Core Configuration - PORT=8080 - ENVIRONMENT=production - TRAEFIK_DYNAMIC_CONFIG=/etc/traefik/dynamic_config.yml - TRAEFIK_CONTAINER_NAME=traefik - TRAEFIK_STATIC_CONFIG=/etc/traefik/traefik_config.yml - CROWDSEC_METRICS_URL=http://crowdsec:6060/metrics volumes: - /var/run/docker.sock:/var/run/docker.sock - /root/config:/app/config - /root/docker-compose.yml:/app/docker-compose.yml - ./backups:/app/config/backups - ./data:/app/data networks: pangolin: external: true volumes: tailscale-data:

mkdir -p ./backups ./data docker network create pangolin docker compose up -d

curl http://localhost:8080/health

Base prefix: /api

• GET /api/health/stack
• GET /api/health/crowdsec
• GET /api/health/complete

• GET /api/ip/public
• GET /api/ip/blocked/:ip
• GET /api/ip/security/:ip
• POST /api/ip/unban

• GET /api/whitelist/view
• POST /api/whitelist/current
• POST /api/whitelist/manual
• POST /api/whitelist/cidr
• POST /api/whitelist/crowdsec
• POST /api/whitelist/traefik
• POST /api/whitelist/comprehensive
• DELETE /api/whitelist/remove

• GET /api/allowlist/list
• POST /api/allowlist/create
• GET /api/allowlist/inspect/:name
• POST /api/allowlist/add
• POST /api/allowlist/remove
• DELETE /api/allowlist/:name

• POST /api/scenarios/setup
• GET /api/scenarios/list
• GET /api/scenarios/files
• DELETE /api/scenarios/file

• POST /api/captcha/setup
• GET /api/captcha/status
• GET /api/captcha/detect
• POST /api/captcha/config
• POST /api/captcha/apply

• GET /api/logs/crowdsec
• GET /api/logs/traefik
• GET /api/logs/traefik/advanced
• GET /api/logs/:service
• GET /api/logs/stream/:service
• GET /api/logs/structured/:service

• GET /api/backup/list
• POST /api/backup/create
• POST /api/backup/restore
• DELETE /api/backup/:id
• POST /api/backup/cleanup
• GET /api/backup/latest

• GET /api/update/check
• POST /api/update/with-crowdsec
• POST /api/update/without-crowdsec

• GET /api/services/verify
• POST /api/services/shutdown
• POST /api/services/action

• GET /api/crowdsec/bouncers
• POST /api/crowdsec/bouncers
• DELETE /api/crowdsec/bouncers/:name
• GET /api/crowdsec/decisions
• POST /api/crowdsec/decisions
• DELETE /api/crowdsec/decisions
• POST /api/crowdsec/decisions/import
• GET /api/crowdsec/decisions/analysis
• GET /api/crowdsec/alerts/analysis
• GET /api/crowdsec/alerts/:id
• DELETE /api/crowdsec/alerts/:id
• GET /api/crowdsec/metrics
• POST /api/crowdsec/enroll
• POST /api/crowdsec/enroll/finalize
• GET /api/crowdsec/enroll/preferences
• PUT /api/crowdsec/enroll/preferences
• GET /api/crowdsec/status

• GET /api/traefik/config
• GET /api/traefik/config-path
• POST /api/traefik/config-path

• GET /api/config/settings
• PUT /api/config/settings
• GET /api/config/files/:container/:fileType

• GET /api/notifications/discord
• POST /api/notifications/discord
• GET /api/notifications/discord/preview
• GET /api/notifications/discord/detect
• POST /api/notifications/discord/config
• POST /api/notifications/discord/apply

• POST /api/cron/setup
• GET /api/cron/list
• DELETE /api/cron/:id

• GET /api/profiles
• POST /api/profiles

• GET /api/hosts/list

• GET /api/terminal/:container

• GET /api/config/validation/validate
• GET /api/config/validation/snapshots
• POST /api/config/validation/snapshot
• POST /api/config/validation/restore/:type
• POST /api/config/validation/accept/:type
• DELETE /api/config/validation/snapshot/:type

• GET /api/hub/list
• POST /api/hub/upgrade
• GET /api/hub/categories
• GET /api/hub/:category/items
• POST /api/hub/:category/install
• POST /api/hub/:category/remove
• POST /api/hub/:category/manual-apply
• GET /api/hub/preferences
• GET /api/hub/preferences/:category
• PUT /api/hub/preferences/:category
• GET /api/hub/history
• GET /api/hub/history/:id

• GET /api/simulation/status
• POST /api/simulation/toggle

• GET /api/events/ws
• GET /api/events/sse

For installation details, feature guides, and API reference, use the docs in docs.

This project is licensed under the MIT License - see the LICENSE file for details.

• Issues: GitHub Issues
• Discussions: GitHub Discussions

• Original bash script by hhf-technology
• CrowdSec for the security engine
• Traefik for reverse proxy
• Shadcn/ui for UI components

Built with ❤️ for the CrowdSec/Pangolin community