crowdsec/config/profiles.yaml

19 lines
493 B
YAML
Raw Normal View History

2020-05-15 09:39:16 +00:00
profile: default_remediation
filter: "sig.Labels.remediation == 'true'"
api: true # If no api: specified, will use the default config in default.yaml
remediation:
ban: true
slow: true
captcha: true
duration: 4h
outputs:
- plugin: sqlite
---
profile: default_notification
filter: "sig.Labels.remediation != 'true'"
#remediation is empty, it means non taken
api: false
outputs:
- plugin: sqlite # If we do not want to push, we can remove this line and the next one
store: false