From 797cabb55dfc174b19f9f7d42f8e79d2ecfa4db9 Mon Sep 17 00:00:00 2001
From: Eric Torres <eric.torres@its-et.me>
Date: Sun, 2 Nov 2025 21:12:46 -0800
Subject: [PATCH] services/crowdsec: move stirling-pdf acquisition from Docker
 to systemd_unit

---
 services/crowdsec.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/crowdsec.nix b/services/crowdsec.nix
index a976f39..3e95be9 100644
--- a/services/crowdsec.nix
+++ b/services/crowdsec.nix
@@ -95,7 +95,7 @@ in
             log_level = "info";
             url = "http://log-01.tail755c5.ts.net:3100";
             limit = 1000;
-            query = "{container=\"stirling-pdf\"}";
+            query = "{systemd_unit=\"stirling-pdf\"}";
             labels.type = "stirling-pdf";
           }
         ];