container_runtime: containerd
agent:
  env:
    - name: COLLECTIONS
      value: "crowdsecurity/traefik crowdsecurity/base-http-scenarios crowdsecurity/sshd"
  extraVolumes:
    - name: journal-dir
      hostPath:
        path: /var/log/journal
        type: DirectoryOrCreate
    - name: run-journal-dir
      hostPath:
        path: /run/log/journal
        type: DirectoryOrCreate
  extraVolumeMounts:
    - name: journal-dir
      mountPath: /var/log/journal
      readOnly: true
    - name: run-journal-dir
      mountPath: /run/log/journal
      readOnly: true

  acquisition:
    - namespace: traefik
      podName: "*traefik*"
      program: traefik
      poll_without_inotify: true

  acquisitionCustom: |
    - source: journalctl
      journalctl_filter:
        - _SYSTEMD_UNIT=sshd.service
      labels:
        type: syslog

  resources:
    requests:
      cpu: 50m
      memory: 100Mi
    limits:
      cpu: 200m
      memory: 500Mi

lapi:
  env:
    - name: COLLECTIONS
      value: "crowdsecurity/traefik crowdsecurity/base-http-scenarios crowdsecurity/sshd"
  service:
    type: NodePort
    nodePort: 30011
  resources:
    requests:
      cpu: 50m
      memory: 150Mi
    limits:
      cpu: 200m
      memory: 500Mi

metrics:
  enabled: true
  serviceMonitor:
    additionalLabels:
      release: prometheus-stack
    enabled: true
    namespace: prometheus