Ns8-crowdsec: URL in admin report e-mail does not work

jmartens · October 21, 2026, 6:13am

I have found two issues in the crowdsec admin notification e-mail:

When you enable the admin emails on crowdsec for non-master nodes the link in the e-mail links named View active decisions links to the local node cluster-admin page but instead it should link to master node.
Second issue is that it refers to a unban page (?page=unban) which does not seem to exist.

jmartens · October 21, 2026, 6:25am

The link is generated in the template at ns8-crowdsec/imageroot/templates/email.yaml at main · NethServer/ns8-crowdsec · GitHub

jmartens · October 21, 2026, 7:19am

It seems it is (re)generated here:

github.com/NethServer/ns8-crowdsec

imageroot/bin/expand-smarthost

5a1a157bd


      
          files =["crowdsec_config/notifications/email.yaml"]
          for f in files:
              try:
                  os.remove(f)
              except FileNotFoundError:
                  pass
          
          if receiver_emails and smtp['enabled']:
              jenv = Environment(
                  loader=FileSystemLoader(os.getenv("AGENT_INSTALL_DIR")+"/templates"),
                  autoescape=select_autoescape(),
                  keep_trailing_newline=True,
              )
              properties = {
                  "smtp_host" : smtp['host'],
                  "smtp_username": smtp['username'],
                  "smtp_password": smtp['password'],
                  "smtp_port": smtp['port'],
                  "sender_email": get_sender_email(),
                  "receiver_emails": receiver_emails.split(","),

This file has been truncated. show original

Is there a ns8 approved way of getting the FQDN of the cluster master host? If so I can perhaps submit a PR to address:

stephdl · October 21, 2026, 8:01am

github.com/NethServer/dev

CrowdSec: report email link points to the wrong node and page

ouvert 07:57AM - 21 Oct 26 UTC

stephdl

**Steps to reproduce** - Install CrowdSec on a worker node (not the leader) and… configure email notifications - Wait for a ban report email - Click "View Active Decisions" **Expected behavior** The link opens the cluster admin on the leader node, on the page that lists the banned IPs. **Actual behavior** The link points to the node running CrowdSec, which has no cluster admin when it is a worker. It also opens `?page=unban`, a page removed by the UI redesign. **Components** CrowdSec 1.4.1 **See also** https://community.nethserver.org/t/ns8-crowdsec-url-in-admin-report-e-mail-does-not-work/29156 ---- Thanks to @jmartens for the report.

it should fix the issue

jmartens · October 21, 2026, 8:32am

Although I like the rapid turnaround on the fix wouldn’t it be better to expose this the the agent module? So, the determination gets one unique definition in code accessible to the whole nethserver eco system?

It seems there already is a way to request smarthost, wouldn’t it be nice to also be able to receive the details of the master node as an exposed python method?