From e3b0cf5dcf4c83e80c8a1b9a81a0736cbd1afef2 Mon Sep 17 00:00:00 2001 From: chriswin Date: Mon, 10 Aug 2026 14:32:36 +0000 Subject: [PATCH] update bouncer config --- services/crowdsec/crowdsec.yml | 2 +- services/traefik/config/config.yml | 5 +++-- services/traefik/traefik.yml | 3 ++- 3 files changed, 6 insertions(+), 4 deletions(-) diff --git a/services/crowdsec/crowdsec.yml b/services/crowdsec/crowdsec.yml index 26cdba5..098136e 100644 --- a/services/crowdsec/crowdsec.yml +++ b/services/crowdsec/crowdsec.yml @@ -7,7 +7,7 @@ services: image: crowdsecurity/crowdsec:v1.7.8 environment: COLLECTIONS: crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules crowdsecurity/http-cve - CROWDSEC_BOUNCER_API_KEY: ${CROWDSEC_API_KEY} + BOUNCER_KEY_traefik: ${CROWDSEC_API_KEY} CUSTOM_HOSTNAME: crowdsec ports: - 6061:8080 diff --git a/services/traefik/config/config.yml b/services/traefik/config/config.yml index 200c03a..3337818 100644 --- a/services/traefik/config/config.yml +++ b/services/traefik/config/config.yml @@ -8,7 +8,7 @@ http: enabled: true logLevel: INFO updateIntervalSeconds: 60 - crowdsecMode: live + crowdsecMode: stream crowdsecAppsecEnabled: true crowdsecAppsecFailureBlock: true crowdsecAppsecUnreachableBlock: true @@ -20,7 +20,8 @@ http: forwardedHeadersTrustedIPs: - 10.0.0.0/8 clientTrustedIPs: - - 192.168.178.0/24 + - 192.168.1.0/24 + - 100.64.0.0/24 # captchaProvider: hcaptcha # captchaSiteKey: b2d20610-8dda-4f40-8688-7ca8e1e628f8 # found in hcaptcha account # captchaSecretKey: {{ env "TRAEFIK_CAPTCHA_KEY" }} diff --git a/services/traefik/traefik.yml b/services/traefik/traefik.yml index 9ea9e5a..0abc9d5 100644 --- a/services/traefik/traefik.yml +++ b/services/traefik/traefik.yml @@ -10,7 +10,8 @@ services: - "443:443" - "8079:8080" networks: - - ip4net + ip4net: + ipv4_address: 10.6.0.10 environment: TRAEFIK_EMAIL: ${EMAIL} TRAEFIK_PUBLIC_DOMAIN: ${PUBLIC_DOMAIN}