services:
  crowdsec:
    image: crowdsecurity/crowdsec
    container_name: crowdsec
    networks:
      - netgrimoire
    volumes:
      - /export/Docker/crowdsec/config:/etc/crowdsec
      - /export/Docker/crowdsec/data:/var/lib/crowdsec/data
      - /export/Docker/caddy/logs:/var/log/caddy:ro # Mount Caddy logs
    environment:
      - COLLECTIONS=crowdsecurity/http-dos crowdsecurity/caddy

    deploy:
      placement:
        constraints:
          - node.hostname == nas

  # caddy-bouncer:
  #   image: crowdsecurity/caddy-bouncer
  #   container_name: caddy-bouncer
  #   restart: unless-stopped
  #   volumes:
  #     - /export/Docker/crowdsec/bouncer:/etc/caddy-bouncer
  #   networks:
  #     - netgrimoire
    
  #   deploy:
  #     placement:
  #       constraints:
  #         - node.hostname == nas

networks:
  netgrimoire:
    external: true