Merge pull request 'Update traefik Docker tag to v3.7.13' (#35) from renovate/traefik-3.x into main

services/beszel/beszel.yml

@@ -3,12 +3,12 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: henrygd/beszel-agent:0.18.7
+    image: henrygd/beszel-agent:0.19.0
     container_name: beszel-agent
     network_mode: host
     volumes:
       - ${SERVICE_PATH}/beszel/data:/var/lib/beszel-agent
-      - ${SERIVCE_PATH}/beszel/socket:/beszel_socket
+      - ${SERVICE_PATH}/beszel/socket:/beszel_socket
       - /var/run/docker.sock:/var/run/docker.sock:ro
     environment:
       LISTEN: /beszel_socket/beszel.sock

services/crowdsec/crowdsec.yml

@@ -4,10 +4,10 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: crowdsec
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.1
     environment:
       COLLECTIONS: crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules crowdsecurity/http-cve
-      CROWDSEC_BOUNCER_API_KEY: ${CROWDSEC_API_KEY}
+      BOUNCER_KEY_traefik: ${CROWDSEC_API_KEY}
       CUSTOM_HOSTNAME: crowdsec
     ports:
       - 6061:8080

services/traefik/config/config.yml

@@ -8,7 +8,8 @@ http:
           enabled: true 
           logLevel: INFO
           updateIntervalSeconds: 60
-          crowdsecMode: live 
+          metricsUpdateIntervalSeconds: 600
+          crowdsecMode: stream 
           crowdsecAppsecEnabled: true
           crowdsecAppsecFailureBlock: true 
           crowdsecAppsecUnreachableBlock: true 
@@ -20,13 +21,14 @@ http:
           forwardedHeadersTrustedIPs:
             - 10.0.0.0/8
           clientTrustedIPs:
-            - 192.168.178.0/24
+            - 192.168.1.0/24
+            - 100.64.0.0/24
           # captchaProvider: hcaptcha
           # captchaSiteKey: b2d20610-8dda-4f40-8688-7ca8e1e628f8 # found in hcaptcha account
           # captchaSecretKey: {{ env "TRAEFIK_CAPTCHA_KEY" }}
-          # captchaGracePeriodSeconds: 1800
-          # captchaHTMLFilePath: /captcha.html
-          # banHTMLFilePath: /ban.html
+          captchaGracePeriodSeconds: 1800
+          captchaHTMLFilePath: /captcha.html
+          banHTMLFilePath: /ban.html
 
   routers:
     authelia:

services/traefik/config/traefik.yml

@@ -74,4 +74,4 @@ experimental:
   plugins:
     crowdsec-bouncer-traefik-plugin:
       moduleName: "github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      version: "v1.5.0-beta1"
+      version: "v1.7.1"

services/traefik/traefik.yml

@@ -3,14 +3,15 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: traefik:v3.7.10
+    image: traefik:v3.7.13
     container_name: traefik
     ports:
       - "80:80"
       - "443:443"
       - "8079:8080"
     networks:
-      - ip4net
+      ip4net:
+        ipv4_address: 10.6.0.10
     environment:
       TRAEFIK_EMAIL: ${EMAIL}
       TRAEFIK_PUBLIC_DOMAIN: ${PUBLIC_DOMAIN}