# RouterOS v7.22+ custom App template.
# Replace the image with a registry path you control. Manual .tar import is the recommended path for this project.
name: routeros-suricata-tzsp
descr: TZSP receiver with Suricata IDS and local dashboard
category: monitoring
default-credentials: none
services:
  ids:
    image: docker.io/CHANGE_ME/routeros-suricata-tzsp:latest
    ports:
      - 8080:8080:tcp
      - 37008:37008:udp
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      TZSP_PORT: "37008"
      TAP_NAME: suritap0
      AUTO_BLOCK: "false"
      MONITORED_NETWORKS: 192.168.100.0/24
      ALERT_MAX_SEVERITY: "2"
      ALERT_DEDUP_WINDOW_SECONDS: "300"
      ALERT_IGNORE_SIDS: ""
      ALERT_IGNORE_CATEGORIES: ""
      RULE_UPDATE_INTERVAL_HOURS: "24"
      ADMIN_TOKEN: ""