backup stack: crowdsec [2026-10-22]

stacks/16_crowdsec.yml

@@ -1,4 +1,24 @@
 services:
+  crowdsec-db:
+    image: mariadb:11
+    container_name: crowdsec-db
+    restart: unless-stopped
+    environment:
+      - MARIADB_ROOT_PASSWORD=Qm7vR2xKp9Lw4TnZ8cYd
+      - MARIADB_DATABASE=crowdsec
+      - MARIADB_USER=crowdsec
+      - MARIADB_PASSWORD=Hs3bN6jWe5RtV1uXa8Gf
+    volumes:
+      - /home/pi/docker/crowdsec/mariadb-data:/var/lib/mysql
+      - /home/pi/docker/crowdsec/mariadb-init:/docker-entrypoint-initdb.d:ro
+    healthcheck:
+      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
+      interval: 10s
+      timeout: 5s
+      retries: 10
+      start_period: 30s
+    networks: [crowdsec]
+
   crowdsec:
     image: crowdsecurity/crowdsec:latest
     container_name: crowdsec
@@ -17,6 +37,9 @@ services:
       - /home/pi/docker/crowdsec/config:/etc/crowdsec
     ports:
       - "8080:8080"   # API for the n8n bouncer and the NUC agent
+    depends_on:
+      crowdsec-db:
+        condition: service_healthy
     networks: [crowdsec]
 
   prometheus:
@@ -44,11 +67,12 @@ services:
     volumes:
       - /home/pi/docker/crowdsec/monitoring/grafana-data:/var/lib/grafana
       - /home/pi/docker/crowdsec/monitoring/grafana-datasource.yml:/etc/grafana/provisioning/datasources/prometheus.yml:ro
+      - /home/pi/docker/crowdsec/monitoring/grafana-datasource-mariadb.yml:/etc/grafana/provisioning/datasources/mariadb.yml:ro
     ports:
       - "3031:3000"
-    depends_on: [prometheus]
+    depends_on: [prometheus, crowdsec-db]
     networks: [crowdsec]
 
 networks:
   crowdsec:
-    name: crowdsec
+    name: crowdsec