Skip to content

Commit d21d96f

Browse files
authored
Merge branch 'main' into cve-explorer-docs
2 parents 75e9fad + b95912c commit d21d96f

3 files changed

Lines changed: 37 additions & 5 deletions

File tree

crowdsec-docs/blog/2024-06-11-cscli_dashboard_deprecation.md

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,9 +19,13 @@ Some users using `cscli dashboard` command did not understand what was happening
1919

2020
## What will happen to the `cscli dashboard` command ?
2121

22-
The `cscli dashboard` command will be deprecated in version `1.7.0` of the CrowdSec package. However, we don't want to leave users without a solution to visualize their data. We are working on a new way to deploy the Metabase dashboard via a script that will automate the deployment of the dashboard.
22+
The `cscli dashboard` command will be deprecated starting from version `1.7.0` of the CrowdSec package. Moving forward, users will have the following alternatives for viewing metrics and insights:
2323

24-
A development version of the script can be found linked [here](https://github.com/crowdsecurity/crowdsec/issues/2927)
24+
* CrowdSec Console (officially supported)
25+
* Prometheus with Grafana
26+
* VictoriaMetrics with Grafana
27+
28+
Please note that **only the CrowdSec Console is officially supported by the CrowdSec team**. The other options are provided for flexibility but are community-driven and require self-management.
2529

2630
## What should I do now?
2731

@@ -31,4 +35,6 @@ Currently we recommend that you firstly check which version of Metabase that is
3135
docker ps -a
3236
```
3337

34-
This will show you the running containers on your system. Look for the Metabase container and check the version of the container. If you are running a version of Metabase that is vulnerable to a CVE, we recommend that you update to latest version of CrowdSec then re run the `cscli dashboard` command to update the Metabase dashboard.
38+
This will show you the running containers on your system. Look for the Metabase container and check its version. If you are running a version of Metabase that is vulnerable to a CVE, we recommend updating to the latest version of CrowdSec and re-running the `cscli dashboard` command to refresh the Metabase dashboard.
39+
40+
**If you are already on version `1.7.0`, you will need to manually remove the container, as the `cscli dashboard` command is no longer available.**

crowdsec-docs/unversioned/bouncers/firewall.mdx

Lines changed: 27 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -342,6 +342,11 @@ Skip verification of the API certificate, typical for self-signed certificates
342342

343343
disable interacting with ipv6 chains/sets, defaults to `false`
344344

345+
### `disable_ipv4`
346+
> `true` | `false`
347+
348+
disable interacting with ipv4 chains/sets, defaults to `false`
349+
345350
### `deny_action`
346351
> `DROP` | `REJECT`
347352

@@ -362,7 +367,7 @@ if logging is true, this sets the log prefix, defaults to "crowdsec: "
362367
### `iptables_chains`
363368
> []string
364369
365-
specify a list of chains to insert rules
370+
specify a list of chains to insert rules into both ipv4 and ipv6
366371
367372
```yaml
368373
iptables_chains:
@@ -375,6 +380,27 @@ iptables_chains:
375380
If you are using a dockerized application and allow remote connections to the exposed port, you need to add the `DOCKER-USER` chain to the list of chains.
376381
:::
377382
383+
### `iptables_v4_chains`
384+
> []string
385+
386+
Specify a list of chains to insert rules into ipv4 only
387+
388+
```yaml
389+
iptables_v4_chains:
390+
- INPUT
391+
- DOCKER-USER
392+
```
393+
394+
### `iptables_v6_chains`
395+
> []string
396+
397+
Specify a list of chains to insert rules into ipv6 only
398+
399+
```yaml
400+
iptables_v6_chains:
401+
- INPUT
402+
```
403+
378404
### `blacklists_ipv4`
379405
> string
380406

crowdsec-docs/unversioned/getting_started/post_installation/whitelists.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ By default CrowdSec will whitelist private LAN IP addresses via [this parser](ht
1313

1414
In this guide we will cover how to create some whitelists and how to apply them to your CrowdSec instance.
1515

16-
However, we can't cover every possible use case, so if you have a specific one that isn't covered here, please refer to [detailed whitelist documentation](/docs/next/whitelist/intro)
16+
However, we can't cover every possible use case, so if you have a specific one that isn't covered here, please refer to [detailed whitelist documentation](/docs/next/log_processor/whitelist/intro)
1717

1818
:::info
1919
We use "event" as a term to describe a log line that is currently being processed by CrowdSec. An "event" can be a log line from a log file, or an "overflow" from a scenario.

0 commit comments

Comments
 (0)