fix(security): LAPI-only engine boot, import via stdin, correct compose service

scripts/blocklists-sync.sh

@@ -79,7 +79,7 @@ container_running() {
 }
 
 cscli_exec() {
-  compose_cmd exec -T "$CONTAINER_NAME" cscli "$@"
+  compose_cmd exec -T crowdsec cscli "$@"
 }
 
 fetch_sources() {
@@ -205,6 +205,6 @@ cscli_exec decisions delete --origin cscli-import >/dev/null 2>&1 || true
 } > "$work/import.csv"
 
 printf 'Importing %s decisions into the local LAPI (duration %s)...\n' "$count_total" "$duration"
-cscli_exec decisions import -i "$work/import.csv" --format csv --batch 1000
+cscli_exec decisions import -i - --format csv --batch 1000 < "$work/import.csv"
 
 printf 'Done. The app bouncer picks these up within a few seconds.\n'

scripts/crowdsec-setup.sh

@@ -147,7 +147,7 @@ while ! health_probe "http://127.0.0.1:$port/health"; do
   sleep 2
 done
 
-printf 'CrowdSec engine running on 127.0.0.1:%s (container %s), reading %s/access.log.\n' "$port" "$CONTAINER_NAME" "$log_dir"
+printf 'CrowdSec engine running in LAPI-only mode on 127.0.0.1:%s (container %s).\n' "$port" "$CONTAINER_NAME"
 compose_cmd exec -T crowdsec cscli bouncers list >/dev/null 2>&1 \
   && printf 'Bouncer "cms" was registered against the local LAPI.\n' \
   || printf 'Warning: could not list bouncers. Diagnose with: docker compose exec -T %s cscli bouncers list\n' "$CONTAINER_NAME"