homelab/crowdsec/README.md

CrowdSec

Helm values, dashboards, network policy, and a maintenance CronJob.

Install CrowdSec separately using k8s/crowdsec-values.yaml; the deploy workflow does not have a CrowdSec Helm release entry. There is no k8s/active marker in this directory.

The LAPI policy and janitor run in crowdsec. The dashboard ConfigMaps are in prometheus for Grafana's sidecar. The janitor has its own ServiceAccount and namespace Role. Review its script and schedule before enabling cleanup.

Traefik's values state that enforcement moved to a host firewall bouncer. This repository does not install that host component.

Inspect

From the repository root:

kubectl get pods,svc,pvc -n crowdsec
kubectl get events -n crowdsec --sort-by=.metadata.creationTimestamp

See the repository README for deployment selection.