From d0e3149200cad37c483fd5db84b655fa2fb845be Mon Sep 17 00:00:00 2001
From: chris <tech@crescentec.ch>
Date: Fri, 23 Jan 2026 17:10:12 +0000
Subject: [PATCH] clean up traefik and crowdsec improvements

---
 services/crowdsec/appsec.yaml      |  6 ------
 services/crowdsec/crowdsec.yml     |  1 -
 services/traefik/config/config.yml | 10 +---------
 3 files changed, 1 insertion(+), 16 deletions(-)
 delete mode 100644 services/crowdsec/appsec.yaml

diff --git a/services/crowdsec/appsec.yaml b/services/crowdsec/appsec.yaml
deleted file mode 100644
index 279fcd8..0000000
--- a/services/crowdsec/appsec.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-appsec_configs:
-  - crowdsecurity/appsec-default
-labels:
-  type: appsec
-listen_addr: 0.0.0.0:7422
-source: appsec
diff --git a/services/crowdsec/crowdsec.yml b/services/crowdsec/crowdsec.yml
index 67b4eae..c39e68d 100644
--- a/services/crowdsec/crowdsec.yml
+++ b/services/crowdsec/crowdsec.yml
@@ -18,7 +18,6 @@ services:
       - ${SERVICE_PATH}/crowdsec/config/acquis.yaml:/etc/crowdsec/acquis.yaml:ro
       - ${SERVICE_PATH}/crowdsec/config/config.yaml:/etc/crowdsec/config.yaml
       - ${SERVICE_PATH}/crowdsec/config:/etc/crowdsec
-      - ${SERVICE_PATH}/crowdsec/appsec.yaml:/etc/crowdsec/acquis.d/appsec.yaml
       - ${SERVICE_PATH}/crowdsec/data:/var/lib/crowdsec/data
       - /var/log/traefik:/var/log/crowdsec:ro
       - /var/log/syslog:/var/log/syslog:ro
diff --git a/services/traefik/config/config.yml b/services/traefik/config/config.yml
index 4f0c9d7..1f04cf7 100644
--- a/services/traefik/config/config.yml
+++ b/services/traefik/config/config.yml
@@ -5,7 +5,7 @@ http:
     crowdsec-bouncer:
       plugin:
         crowdsec-bouncer-traefik-plugin:
-          enabled: true
+          enabled: true 
           logLevel: INFO
           updateIntervalSeconds: 60
           crowdsecMode: stream
@@ -53,14 +53,6 @@ http:
         certresolver: myresolver
       middlewares: crowdsec-bouncer@file
 
-    headscale:
-      rule: "Host(`headscale.{{ env "TRAEFIK_PUBLIC_DOMAIN" }}`)"
-      service: node 
-      entrypoints: https,http 
-      tls:
-        certresolver: myresolver
-      middlewares: crowdsec-bouncer@file
-
     immich:
       rule: "Host(`immich.{{ env "TRAEFIK_PUBLIC_DOMAIN" }}`)"
       service: node