nixos/crowdsec: Enable module (#441602)

nixos/doc/manual/release-notes/rl-2511.section.md

@@ -74,6 +74,8 @@
 
 - [postfix-tlspol](https://github.com/Zuplu/postfix-tlspol), MTA-STS and DANE resolver and TLS policy server for Postfix. Available as [services.postfix-tlspol](#opt-services.postfix-tlspol.enable).
 
+- [crowdsec](https://www.crowdsec.net/), a free, open-source and collaborative IPS. Available as [services.crowdsec](#opt-services.crowdsec.enable).
+
 - [Newt](https://github.com/fosrl/newt), a fully user space WireGuard tunnel client and TCP/UDP proxy, designed to securely expose private resources controlled by Pangolin. Available as [services.newt](options.html#opt-services.newt.enable).
 
 - [IfState](https://ifstate.net), manage host interface settings in a declarative manner. Available as [networking.ifstate](options.html#opt-networking.ifstate.enable) and [boot.initrd.network.ifstate](options.html#opt-boot.initrd.network.ifstate.enable).

nixos/modules/module-list.nix

@@ -1446,6 +1446,7 @@
   ./services/security/certmgr.nix
   ./services/security/cfssl.nix
   ./services/security/clamav.nix
+  ./services/security/crowdsec.nix
   ./services/security/e-imzo.nix
   ./services/security/endlessh-go.nix
   ./services/security/endlessh.nix

nixos/modules/services/security/crowdsec.nix

@@ -170,6 +170,11 @@ in
                 };
               };
             };
+            description = ''
+              The set of parser specifications.
+
+              See <https://docs.crowdsec.net/docs/parsers/intro> for details.
+            '';
             default = { };
           };
           postOverflows = lib.mkOption {
@@ -198,6 +203,11 @@ in
                 };
               };
             };
+            description = ''
+              The set of Postoverflows specifications.
+
+              See <https://docs.crowdsec.net/docs/next/log_processor/parsers/intro#postoverflows> for details.
+            '';
             default = { };
           };
           contexts = lib.mkOption {
@@ -306,6 +316,9 @@ in
           };
           patterns = lib.mkOption {
             type = lib.types.listOf lib.types.package;
+            description = ''
+              A list of files containing custom grok patterns.
+            '';
             default = [ ];
             example = lib.literalExpression ''
               [ (pkgs.writeTextDir "custom_service_logs" (builtins.readFile ./custom_service_logs)) ]
@@ -313,6 +326,9 @@ in
           };
         };
       };
+      description = ''
+        The configuration for a crowdsec security engine.
+      '';
       default = { };
     };
 
@@ -473,6 +489,9 @@ in
           };
         };
       };
+      description = ''
+        Set of various configuration attributes
+      '';
     };
   };
   config =