I previously had the "full" install on the pfsense (so including the LAPI)
I then changed this and disabled the LAPI to use the one on another server
On the pfsense:
cscli lapi status
Loaded credentials from /usr/local/etc/crowdsec/local_api_credentials.yaml
Trying to authenticate with username pfsense on http://192.168.2.10:8080/
You can successfully interact with Local API (LAPI)
On the LAPI machine (192.168.2.10)
sudo docker exec crowdsec cscli machines list
---------------------------------------------------------------------------------------------------------------------------------------------
Name IP Address Last Update Status Version OS Auth Type Last Heartbeat
---------------------------------------------------------------------------------------------------------------------------------------------
pfsense 192.168.2.1 2025-04-10T22:15:46+02:00 ✔️ v1.6.8-f209766e-freebsd ? password ⚠️ -
www-prod 192.168.2.4 2025-04-11T14:57:12+02:00 ✔️ v1.6.8-f209766e Alpine Linux (docker)/3.21.3 password 32s
localhost 127.0.0.1 2025-04-11T14:56:58+02:00 ✔️ v1.6.8-f209766e-docker Alpine Linux (docker)/3.21.3 password 46s
---------------------------------------------------------------------------------------------------------------------------------------------
sudo docker exec crowdsec cscli bouncers list
-----------------------------------------------------------------------------------------------------------------------------------
Name IP Address Valid Last API pull Type Version Auth Type
-----------------------------------------------------------------------------------------------------------------------------------
pfsense-firewall 192.168.2.1 ✔️ 2025-04-11T15:23:19+02:00 crowdsec-firewall-bouncer v0.0.31_3-freebsd-fb1fb6cb api-key
caddy-cs-bouncer 172.22.0.2 ✔️ 2025-04-11T15:22:36+02:00 caddy-cs-bouncer v0.8.1 api-key
-----------------------------------------------------------------------------------------------------------------------------------
Additionally I cant find any error on the pfsense crowdsec logs.
The pfsense correctly receive alerts propagated by the LAPI machine
Not sure why my LAPI doesnt receive any heartbeat from th pfsense and why the OS stays empty
I previously had the "full" install on the pfsense (so including the LAPI)
I then changed this and disabled the LAPI to use the one on another server
On the pfsense:
On the LAPI machine (192.168.2.10)
Additionally I cant find any error on the pfsense crowdsec logs.
The pfsense correctly receive alerts propagated by the LAPI machine
Not sure why my LAPI doesnt receive any heartbeat from th pfsense and why the OS stays empty