(Debian, Ubuntu) Crowdsec-1-click

Crowdsec - is the best analog Fail2ban, the open-source security solution for youre server

Bash script installs Crowdsec and installs nftables to block IP addresses

💠 Ensure that the sudo and wget packages are installed on your system:

apt install -y sudo wget

💠 Root Access is Required. If the user is not root, first run:

sudo -i

💠 Then:

wget "https://raw.githubusercontent.com/Onair-santa/Crowdsec-1-click/main/install.sh" -O install.sh && chmod +x install.sh && bash install.sh

It performs the following tasks:

• Remove firewalld, ufw or iptables
• Install nftables
• Open ports 22, 443, 80, 8080
• Install Crowdsec
• install firewall-bouncer-nftables
• Starting Crowdsec

Config Crowdsec :

• bounsers list: firewall-bouncer-nftables

• Bucket list: ssh-bf, ssh-slow-bf

• Status command:

  cscli metrics
  cscli decisions list
  cscli alerts list
  cscli bouncers list
  

💠 Thanks and more info

https://github.com/crowdsecurity/crowdsec