Skip to content

Use Linagora's linagora-llng-crowdsec-filters package instead of embedded files - #15

Merged
guimard merged 1 commit into
masterfrom
crowdsec-package
Apr 17, 2026
Merged

guimard merged 1 commit into
masterfrom
crowdsec-package

Conversation

@guimard

@guimard guimard commented Apr 17, 2026

Copy link
Copy Markdown
Owner

…dded filters

Summary by CodeRabbit

Release Notes

  • Chores
    • Migrated CrowdSec security filters from bundled repository files to external system package dependency (linagora-llng-crowdsec-filters).
    • Removed hardcoded filter configurations and pattern definitions; filters are now provisioned and updated independently via package management.

@coderabbitai

coderabbitai Bot commented Apr 17, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: f233bdfd-a0bb-423e-9c19-89cd12b56377

📥 Commits

Reviewing files that changed from the base of the PR and between aaded8b and 66ed316.

📒 Files selected for processing (144)
  • crowdsec_filters/http-admin-probing/.maxfailures
  • crowdsec_filters/http-admin-probing/.scenario
  • crowdsec_filters/http-admin-probing/.timewindow
  • crowdsec_filters/http-admin-probing/patterns.re
  • crowdsec_filters/http-backdoors-attempts/.maxfailures
  • crowdsec_filters/http-backdoors-attempts/.scenario
  • crowdsec_filters/http-backdoors-attempts/.timewindow
  • crowdsec_filters/http-backdoors-attempts/patterns.re
  • crowdsec_filters/http-cve-2021-41773/.maxfailures
  • crowdsec_filters/http-cve-2021-41773/.scenario
  • crowdsec_filters/http-cve-2021-41773/patterns.re
  • crowdsec_filters/http-cve-2024-0012/.maxfailures
  • crowdsec_filters/http-cve-2024-0012/.scenario
  • crowdsec_filters/http-cve-2024-0012/patterns.re
  • crowdsec_filters/http-cve-2024-38475/.maxfailures
  • crowdsec_filters/http-cve-2024-38475/.scenario
  • crowdsec_filters/http-cve-2024-38475/.timewindow
  • crowdsec_filters/http-cve-2024-38475/patterns.re
  • crowdsec_filters/http-cve-probing/.maxfailures
  • crowdsec_filters/http-cve-probing/.scenario
  • crowdsec_filters/http-cve-probing/patterns.txt
  • crowdsec_filters/http-path-traversal-probing/.maxfailures
  • crowdsec_filters/http-path-traversal-probing/.scenario
  • crowdsec_filters/http-path-traversal-probing/.timewindow
  • crowdsec_filters/http-path-traversal-probing/patterns.txt
  • crowdsec_filters/http-sensitive-files/.maxfailures
  • crowdsec_filters/http-sensitive-files/.scenario
  • crowdsec_filters/http-sensitive-files/.timewindow
  • crowdsec_filters/http-sensitive-files/patterns.re
  • crowdsec_filters/http-wordpress-scan/.maxfailures
  • crowdsec_filters/http-wordpress-scan/.scenario
  • crowdsec_filters/http-wordpress-scan/.timewindow
  • crowdsec_filters/http-wordpress-scan/patterns.re
  • crowdsec_filters/url_collected/url.re
  • crowdsec_filters/url_collected/url.txt
  • crowdsec_filters/url_crowdsec/backdoors.txt
  • crowdsec_filters/url_crowdsec/jira_cve_2021-26086.txt
  • crowdsec_filters/url_crowdsec/log4j2_cve_2021_44228.txt
  • crowdsec_filters/url_crowdsec/path_traversal.txt
  • crowdsec_filters/url_crowdsec/picked-from-scenarios.re
  • crowdsec_filters/url_crowdsec/sensitive_data.txt
  • crowdsec_filters/url_crowdsec/sqli_probe_patterns.txt
  • crowdsec_filters/url_crowdsec/thinkphp_cve_2018-20062.txt
  • crowdsec_filters/url_crowdsec/xss_probe_patterns.txt
  • crowdsec_filters/url_scanner/url.re
  • crowdsec_filters/urlskip_icons/icons.re
  • crowdsec_filters/urlskip_robots/robots.re
  • install_files
  • portal/Dockerfile
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/patterns.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/patterns.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/backdoors.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/jira_cve_2021-26086.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/log4j2_cve_2021_44228.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/path_traversal.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/picked-from-scenarios.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sensitive_data.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sqli_probe_patterns.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/thinkphp_cve_2018-20062.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/xss_probe_patterns.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_scanner/url.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_icons/icons.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_robots/robots.re
  • uwsgi-portal/Dockerfile
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/patterns.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/patterns.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/backdoors.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/jira_cve_2021-26086.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/log4j2_cve_2021_44228.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/path_traversal.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/picked-from-scenarios.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sensitive_data.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sqli_probe_patterns.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/thinkphp_cve_2018-20062.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/xss_probe_patterns.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_scanner/url.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_icons/icons.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_robots/robots.re
💤 Files with no reviewable changes (139)
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.maxfailures
  • crowdsec_filters/http-backdoors-attempts/.timewindow
  • crowdsec_filters/http-admin-probing/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.timewindow
  • crowdsec_filters/http-cve-2024-38475/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/patterns.re
  • crowdsec_filters/http-cve-2024-0012/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/picked-from-scenarios.re
  • crowdsec_filters/http-admin-probing/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.scenario
  • crowdsec_filters/http-wordpress-scan/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/backdoors.txt
  • crowdsec_filters/http-cve-2024-38475/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.scenario
  • crowdsec_filters/http-path-traversal-probing/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.timewindow
  • crowdsec_filters/http-sensitive-files/.maxfailures
  • crowdsec_filters/http-cve-2021-41773/.maxfailures
  • crowdsec_filters/http-wordpress-scan/.scenario
  • crowdsec_filters/urlskip_icons/icons.re
  • crowdsec_filters/http-cve-2024-0012/.scenario
  • crowdsec_filters/http-cve-2021-41773/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/patterns.re
  • crowdsec_filters/http-cve-probing/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.maxfailures
  • crowdsec_filters/http-admin-probing/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/patterns.re
  • crowdsec_filters/url_crowdsec/path_traversal.txt
  • crowdsec_filters/http-cve-2024-0012/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.maxfailures
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_robots/robots.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.maxfailures
  • crowdsec_filters/http-wordpress-scan/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sqli_probe_patterns.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.scenario
  • install_files
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.timewindow
  • crowdsec_filters/http-cve-2024-38475/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.maxfailures
  • crowdsec_filters/http-backdoors-attempts/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_icons/icons.re
  • crowdsec_filters/http-cve-probing/.maxfailures
  • crowdsec_filters/url_crowdsec/log4j2_cve_2021_44228.txt
  • crowdsec_filters/urlskip_robots/robots.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/jira_cve_2021-26086.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_icons/icons.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/patterns.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.scenario
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/xss_probe_patterns.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/thinkphp_cve_2018-20062.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.scenario
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/patterns.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/patterns.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.timewindow
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/path_traversal.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/picked-from-scenarios.re
  • crowdsec_filters/url_collected/url.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/patterns.re
  • crowdsec_filters/url_crowdsec/thinkphp_cve_2018-20062.txt
  • crowdsec_filters/http-wordpress-scan/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sensitive_data.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/patterns.re
  • crowdsec_filters/url_crowdsec/jira_cve_2021-26086.txt
  • crowdsec_filters/url_crowdsec/sensitive_data.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_robots/robots.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/patterns.re
  • crowdsec_filters/http-cve-2021-41773/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/patterns.re
  • crowdsec_filters/url_crowdsec/backdoors.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/path_traversal.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/jira_cve_2021-26086.txt
  • crowdsec_filters/http-backdoors-attempts/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/log4j2_cve_2021_44228.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.maxfailures
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/thinkphp_cve_2018-20062.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sqli_probe_patterns.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/patterns.txt
  • crowdsec_filters/http-path-traversal-probing/patterns.txt
  • crowdsec_filters/url_crowdsec/sqli_probe_patterns.txt
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.re
  • crowdsec_filters/http-cve-2024-38475/patterns.re
  • crowdsec_filters/http-sensitive-files/.timewindow
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/patterns.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/patterns.re
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.txt
  • crowdsec_filters/url_crowdsec/xss_probe_patterns.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/log4j2_cve_2021_44228.txt
  • crowdsec_filters/http-admin-probing/patterns.re
  • crowdsec_filters/http-cve-probing/patterns.txt
  • crowdsec_filters/http-sensitive-files/patterns.re
  • crowdsec_filters/url_crowdsec/picked-from-scenarios.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/xss_probe_patterns.txt
  • uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/backdoors.txt
  • crowdsec_filters/http-path-traversal-probing/.scenario
  • crowdsec_filters/url_collected/url.re
  • portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sensitive_data.txt
  • crowdsec_filters/http-sensitive-files/.scenario
  • crowdsec_filters/http-backdoors-attempts/.scenario
  • crowdsec_filters/http-path-traversal-probing/.maxfailures

📝 Walkthrough

Walkthrough

CrowdSec filter definitions and configuration files are removed from the repository across source and installation directories. Docker builds now install a separate linagora-llng-crowdsec-filters package. The manual install script that copied filters is deleted.

Changes

Cohort / File(s) Summary
CrowdSec Source Filters Removal
crowdsec_filters/http-*/.*, crowdsec_filters/url_collected/*, crowdsec_filters/url_crowdsec/*, crowdsec_filters/urlskip_*/*
Removed configuration (.maxfailures, .scenario, .timewindow) and pattern definition files (patterns.re, patterns.txt) across all HTTP scanning, URL collection, and URL skipping filter modules.
Portal Installation Filters Removal
portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-*/.*, portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/*, portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/*, portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_*/*
Removed identical configuration and pattern files from portal installation paths, mirroring the source directory cleanup.
uWSGI Portal Installation Filters Removal
uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-*/.*, uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/*, uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/*, uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_*/*
Removed identical configuration and pattern files from uWSGI portal installation paths.
Docker Configuration Updates
portal/Dockerfile, uwsgi-portal/Dockerfile
Added linagora-llng-crowdsec-filters package installation to both portal and uWSGI portal Docker builds.
Installation Script Removal
install_files
Removed shell script that cleaned and copied crowdsec filter files to portal and uWSGI portal install directories.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~35 minutes

Poem

🐰 Filters once scattered through folders wide,
Now gathered in packages, bundled with pride!
From source to install, a cleanup so neat,
One package to rule them—the CrowdSec fleet! 🛡️

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch crowdsec-package

@guimard
guimard merged commit 23615b7 into master Apr 17, 2026
5 checks passed
@guimard
guimard deleted the crowdsec-package branch May 16, 2026 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant