:Merge branch 'main' of https://gitea.crescentec.ch/chriswin/vps-server

services/crowdsec/crowdsec.yml

@@ -7,7 +7,7 @@ services:
     image: crowdsecurity/crowdsec:v1.7.8
     environment:
       COLLECTIONS: crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules crowdsecurity/http-cve
-      CROWDSEC_BOUNCER_API_KEY: ${CROWDSEC_API_KEY}
+      BOUNCER_KEY_traefik: ${CROWDSEC_API_KEY}
       CUSTOM_HOSTNAME: crowdsec
     ports:
       - 6061:8080

services/traefik/config/config.yml

@@ -8,7 +8,7 @@ http:
           enabled: true 
           logLevel: INFO
           updateIntervalSeconds: 60
-          crowdsecMode: live 
+          crowdsecMode: stream 
           crowdsecAppsecEnabled: true
           crowdsecAppsecFailureBlock: true 
           crowdsecAppsecUnreachableBlock: true 
@@ -20,7 +20,8 @@ http:
           forwardedHeadersTrustedIPs:
             - 10.0.0.0/8
           clientTrustedIPs:
-            - 192.168.178.0/24
+            - 192.168.1.0/24
+            - 100.64.0.0/24
           # captchaProvider: hcaptcha
           # captchaSiteKey: b2d20610-8dda-4f40-8688-7ca8e1e628f8 # found in hcaptcha account
           # captchaSecretKey: {{ env "TRAEFIK_CAPTCHA_KEY" }}

services/traefik/traefik.yml

@@ -10,7 +10,8 @@ services:
       - "443:443"
       - "8079:8080"
     networks:
-      - ip4net
+      ip4net:
+        ipv4_address: 10.6.0.10
     environment:
       TRAEFIK_EMAIL: ${EMAIL}
       TRAEFIK_PUBLIC_DOMAIN: ${PUBLIC_DOMAIN}