initial crowdsec

flake.nix

@@ -50,6 +50,11 @@
       inputs.nixpkgs.follows = "nixpkgs-stable";
     };
 
+    crowdsec = {
+      url = "git+https://codeberg.org/kampka/nix-flake-crowdsec.git";
+      inputs.nixpkgs.follows = "nixpkgs-stable";
+    };
+
     #Apple
     nixos-apple-silicon.url = "github:tpwrules/nixos-apple-silicon";
     # nixos-apple-silicon.url = "github:mjallen18/nixos-apple-silicon";
@@ -83,6 +88,7 @@
       # cosmic,
       authentik-nix,
       sops-nix,
+      crowdsec,
       manyfold,
       jovian,
     }@inputs:
@@ -146,6 +152,14 @@
 
             sops-nix.nixosModules.sops
 
+            crowdsec.nixosModules.crowdsec
+            crowdsec.nixosModules.crowdsec-firewall-bouncer
+
+            ({ ... }:
+            {
+              nixpkgs.overlays = [ crowdsec.overlays.default ];
+            })
+
             nixos-hardware.nixosModules.common-pc
             nixos-hardware.nixosModules.common-cpu-amd
             nixos-hardware.nixosModules.common-hidpi