Files
crowdsec-parserwhitelist-ma…/01-matrix-whitelist.yaml
2026-03-11 20:27:19 +01:00

10 lines
424 B
YAML

name: my/matrix-whitelist
description: "Whitelist Matrix/Synapse requests from NPMplus logs"
filter: "evt.Meta.service == 'http' && evt.Meta.log_type in ['http_access-log', 'http_error-log']"
whitelist:
reason: "Matrix federation/client traffic"
expression:
- "evt.Meta.http_path startsWith '/_matrix/'"
- "evt.Meta.http_path startsWith '/_synapse/'"
- "evt.Meta.http_path startsWith '/.well-known/matrix/'"