From f085f17fe8ce18f21aaaa050b529541d25bb06e0 Mon Sep 17 00:00:00 2001
From: mjallen18 <matt.l.jallen@gmail.com>
Date: Mon, 24 Nov 2025 09:48:54 -0600
Subject: [PATCH] logs

---
 modules/nixos/services/crowdsec/default.nix | 36 +++++++++++++++------
 1 file changed, 27 insertions(+), 9 deletions(-)

diff --git a/modules/nixos/services/crowdsec/default.nix b/modules/nixos/services/crowdsec/default.nix
index f777db4..0cef85d 100755
--- a/modules/nixos/services/crowdsec/default.nix
+++ b/modules/nixos/services/crowdsec/default.nix
@@ -54,6 +54,33 @@ in
         };
         localConfig = {
           acquisitions = [
+            {
+              journalctl_filter = [
+                "_SYSTEMD_UNIT=authentik.service"
+              ];
+              labels = {
+                type = "syslog";
+              };
+              source = "journalctl";
+            }
+            {
+              journalctl_filter = [
+                "_SYSTEMD_UNIT=postgresql.service"
+              ];
+              labels = {
+                type = "syslog";
+              };
+              source = "journalctl";
+            }
+            {
+              journalctl_filter = [
+                "_SYSTEMD_UNIT=smbd.service"
+              ];
+              labels = {
+                type = "syslog";
+              };
+              source = "journalctl";
+            }
             {
               journalctl_filter = [
                 "_SYSTEMD_UNIT=sshd.service"
@@ -72,15 +99,6 @@ in
               };
               source = "journalctl";
             }
-            {
-              journalctl_filter = [
-                "_SYSTEMD_UNIT=authentik.service"
-              ];
-              labels = {
-                type = "syslog";
-              };
-              source = "journalctl";
-            }
           ];
         };
         settings = {