The Crowdsec integration defaults to the exposing and binding of port :6060 in the compose file (https://{server-ip}:6060/metrics). While this is not necessarily a security vulnerability, it is a bad practice. Especially because the metrics are not used by anything (at least not as of yet).
The option to expose the metrics should either be asked in the installer script or excluded all together. A user who needs it can always add it afterwards.
Originally created by @narbux on GitHub (Mar 31, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/440
The Crowdsec integration defaults to the exposing and binding of port :6060 in the compose file (https://{server-ip}:6060/metrics). While this is not necessarily a security vulnerability, it is a bad practice. Especially because the metrics are not used by anything (at least not as of yet).
The option to expose the metrics should either be asked in the installer script or excluded all together. A user who needs it can always add it afterwards.
@oschwartz10612 commented on GitHub (Apr 1, 2025):
This is a good point but I think some community support scripts like to use this port to interact with and automate Crowdsec. I think we will leave it for now.
<!-- gh-comment-id:2767857988 -->
@oschwartz10612 commented on GitHub (Apr 1, 2025):
This is a good point but I think some community support scripts like to use this port to interact with and automate Crowdsec. I think we will leave it for now.
@gilbrotheraway commented on GitHub (May 12, 2025):
This is a good point but I think some community support scripts like to use this port to interact with and automate Crowdsec. I think we will leave it for now.
what do you mean by community support scripts ?
<!-- gh-comment-id:2870750859 -->
@gilbrotheraway commented on GitHub (May 12, 2025):
> This is a good point but I think some community support scripts like to use this port to interact with and automate Crowdsec. I think we will leave it for now.
what do you mean by community support scripts ?
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @narbux on GitHub (Mar 31, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/440
The Crowdsec integration defaults to the exposing and binding of port :6060 in the compose file (https://{server-ip}:6060/metrics). While this is not necessarily a security vulnerability, it is a bad practice. Especially because the metrics are not used by anything (at least not as of yet).
The option to expose the metrics should either be asked in the installer script or excluded all together. A user who needs it can always add it afterwards.
@oschwartz10612 commented on GitHub (Apr 1, 2025):
This is a good point but I think some community support scripts like to use this port to interact with and automate Crowdsec. I think we will leave it for now.
@gilbrotheraway commented on GitHub (May 12, 2025):
what do you mean by community support scripts ?