Pular para o conteúdo principal
Security

Self-host CrowdSec on a VPS

Collaborative, behaviour-based intrusion prevention.

Parse your logs, block abusive IPs locally, and optionally share signals with a community blocklist.

Why self-host CrowdSec?

CrowdSec is a modern fail2ban successor that watches real behaviour and blocks attackers before they get far.

How to install CrowdSec

  1. 1

    Provision a VPS

    Choose a plan with room for your data as well as the app.

  2. 2

    Install the stack

    Install Single Go binary + bouncers.

  3. 3

    Deploy the application

    Follow the project’s official install guide for your distribution.

  4. 4

    Enable HTTPS

    Serve it on your own domain behind a reverse proxy with a certificate.

  5. 5

    Back it up

    Schedule a database dump plus a copy of any uploaded files to an off-box location.

Practical tips

  • Give CrowdSec its own database user with rights only on its own schema.
  • Reverse-proxy CrowdSec and terminate TLS at the proxy so certificates are managed in one place.
  • Take a VPS snapshot before major upgrades so you can roll back cleanly.
  • Keep CrowdSec patched — most self-hosting incidents are unpatched software.

Frequently asked questions

How much RAM does CrowdSec need?
Plan on 1–2 GB for typical use; add headroom if you expect many concurrent users.
What stack does CrowdSec run on?
Single Go binary + bouncers.
Can I run other things on the same VPS?
Yes — size the plan so CrowdSec plus your other workloads fit in RAM with room to spare.

Looking for something else? Popular alternatives include fail2ban, OSSEC, Wazuh — browse all app guides.