Networking

Both deployment variants use a crowdsec-network bridge network that Docker Compose creates automatically. No external network setup is required.

Network model

networks:
  crowdsec-network:
    driver: bridge

This is defined at the bottom of the compose file. Docker creates it on docker compose up if it does not exist.

Pangolin variant

The Pangolin stack exposes three ports:

The manager is also reachable via Traefik at manager.localhost (requires a host entry or DNS record pointing to the host).

All services (crowdsec-manager, crowdsec, traefik, pangolin, gerbil) share the same crowdsec-network bridge, so they resolve each other by container name.

Independent variant

The Independent variant exposes one port:

Port 8080 is mapped directly to the host. To put a reverse proxy in front of it, add your own proxy service to the compose file and route to crowdsec-manager:8080 on the crowdsec-network.

Access patterns

• Use ports: "8080:8080" for direct host access (default in both variants).
• To use expose instead of ports (proxy-only access), remove the ports key and ensure your reverse proxy is on the same crowdsec-network.