services:
  crowdsec:
    image: crowdsecurity/crowdsec
    container_name: crowdsec
    networks:
      - netgrimoire
    volumes:
      - /export/Docker/crowdsec/config:/etc/crowdsec
      - /export/Docker/crowdsec/data:/var/lib/crowdsec/data
      - /export/Docker/caddy/logs:/var/log/caddy:ro # Mount Caddy logs
    environment:
      - COLLECTIONS=crowdsecurity/http-dos crowdsecurity/caddy

    deploy:
      placement:
        constraints:
          - node.hostname == nas

networks:
  netgrimoire:
    external: true