crowdsec config

services/traefik/config/config.yml

@@ -0,0 +1,67 @@
+api:
+  dashboard: true
+
+log:
+  level: "INFO"
+
+serversTransport:
+  insecureSkipVerify: true
+
+accessLog:
+  filePath: "/var/log/traefik/access.log" # location of traefik logs for crowdsec
+  format: json
+  bufferingSize: 100 # Configuring a buffer of 100 lines
+  filters:
+    statusCodes:
+      - "204-299"
+      - "400-499"
+      - "500-559" # logged status codes
+
+entryPoints:
+  http:
+    address: "[::]:80" # Create the HTTP entrypoint on port 80
+    forwardedHeaders:
+      insecure: false
+      trustedIPs:
+        - "10.0.0.0/8"
+        - "192.168.178.0/16"
+        - "2a07:600:200:1::/64"
+    proxyProtocol:
+      insecure: false
+      trustedIPs:
+        - "10.0.0.0/8"
+        - "192.168.178.0/16"
+        - "2a07:600:200:1::/64"
+    http:
+      redirections: # HTTPS redirection (80 to 443)
+        entryPoint:
+          to: "https" # The target element
+          scheme: "https" # The redirection target scheme
+          permanent: true # The target element
+
+  https:
+    address: "[::]:443" # Create the HTTPS entrypoint on port 443
+    forwardedHeaders:
+      insecure: false
+      trustedIPs:
+        - "10.0.0.0/8"
+        - "192.168.178.0/16"
+        - "2a07:600:200:1::/64"
+    proxyProtocol:
+      insecure: false
+      trustedIPs:
+        - "10.0.0.0/8"
+        - "192.168.178.0/16"
+        - "2a07:600:200:1::/64"
+
+providers:
+  docker:
+    endpoint: "unix:///var/run/docker.sock" # Listen to the UNIX Docker socket
+    exposedByDefault: false
+  file:
+    directory: "/etc/traefik" # Link to the dynamic configuration
+    watch: true # Watch for modifications
+  providersThrottleDuration: "10" # Configuration reload frequency
+
+metrics:
+  prometheus: {}