Getting metrics to show up in crowdsec console

[andreatitolo]

Hi!

I am trying to get the bouncer metrics to show up in the crowdsec console and I guess also when running docker exec crowdsec cscli metrics show bouncers. For now I am only seeing the firewall-bouncer correctly.
Note that the caddy bouncer works correctly, I tested, and I can see it interfacing with the crowdsec API and successfully blocking IPs.

However, in the caddy bouncer logs I have this 'usage metrics disabled'. Is this the reason I'm not seeing Caddy bouncer metrics in the CrowdSec dashboard or in the bouncers metrics?

{
  "level": "info",
  "ts": redacted,
  "logger": "crowdsec",
  "msg": "usage metrics disabled",
  "instance_id": "redacted",
  "address": "http://crowdsec:8080/"
}

Context, I built caddy with xcaddy.

Dockerfile

FROM caddy:2.10.0-builder-alpine AS builder

RUN xcaddy build \
  --with github.com/hslatman/caddy-crowdsec-bouncer/http@main \
  --with github.com/hslatman/caddy-crowdsec-bouncer/layer4@main \
  --with github.com/hslatman/caddy-crowdsec-bouncer/appsec@main

FROM caddy:2.10.0-alpine
COPY --from=builder /usr/bin/caddy /usr/bin/caddy

Caddyfile

{
        order crowdsec before respond
        crowdsec {
                api_url http://crowdsec:8080
                api_key API_KEY
                ticker_interval 3s
                appsec_url http://crowdsec:7422
        }
}

example.domain.com {

    reverse_proxy http://service:port
    crowdsec

}

Other things I tried to check:

Inspect the bouncer in crowdsec:

docker exec crowdsec cscli bouncers inspect caddy@172.21.0.8
-------------------------------------------------------
 Bouncer: caddy@172.21.0.8
-------------------------------------------------------
 Created At    2025-07-21 21:23:46.549413192 +0000 UTC
 Last Update   2025-08-14 12:46:16.338309782 +0000 UTC
 Revoked?      false
 IP Address    redacted
 Type          caddy-cs-bouncer
 Version       v0.9.2
 Last Pull     2025-08-14 12:46:16.325186784 +0000 UTC
 Auth type     api-key
 OS            ?
 Auto Created  true
-------------------------------------------------------⏎  

Check CrowdSec runtime information (docker exec caddy caddy crowdsec info)

{
  "Streaming": {
    "Enabled": true,
    "Interval": "3s"
  },
  "Live": {
    "Enabled": true,
    "Mode": "adhoc"
  },
  "AppSec": {
    "Enabled": true
  },
  "ShouldFailHard": false,
  "AuthType": "apikey",
  "UserAgent": "caddy-cs-bouncer/v0.9.2",
  "InstanceID": "redacted",
  "Uptime": 1176707632749,
  "NumberOfActiveDecisions": 15025
}

Checking if I can ping the crowdsec api with docker exec caddy caddy crowdsec ping responds in 'success'

[hslatman]

Hey @andreatitolo,

A while back I added the core for sending metrics to Caddy, and enabled that by default, but someone reported an issue with it: #59. I then decided to disable it until I have some more time to look into it. I think I currently don't expose a configuration knob to enabled it, so at the moment the functionality is not available.

[andreatitolo]

Ah I see, I stumbled upon that issue, but I didn't connect the two because it was happening a while ago. Anyway thanks for the quick answer :) A a configuration knob to enabled it would be nice to have the option, but I understand that it might create more issues before having the time to properly inspect it.

[nachomagic]

Hi mates

This thread is great for me.

The first thing I wanted to do is thank @hslatman for caddy bouncer :)

I'm starting with caddy + crowdsec and every step I take I find something that I didn't have done well and I was just investigating because the crowdsec console didn't receive metrics.

It is now clear to me that it is normal that they are not received, that they are disabled for the moment.

I run caddy and crowdsec using docker-compose and I used xcaddy with this lines in the Dockerfile to include the bouncer.

  --with github.com/hslatman/caddy-crowdsec-bouncer/http@main \

    --with github.com/hslatman/caddy-crowdsec-bouncer/appsec@main \

    --with github.com/hslatman/caddy-crowdsec-bouncer/layer4@main \

And this is my crowdsec config in the Caddyfile (I have 2 services, caddy and crowdsec)

  crowdsec {
     api_url http://crowdsec:8080
     api_key {env.CROWDSEC_API_KEY}
    ticker_interval 15s
     appsec_url http://crowdsec:7422
#    disable_streaming
#    enable_hard_fails
    }

I hope you don't mind if I ask you if the rest of the messages are correct?
Is the bouncer enrolled and reporting information correctly?

Should be this flags enabled?

Thanks in advance