:Merge branch 'main' of https://gitea.crescentec.ch/chriswin/vps-server

Reviewed-on: #12

services/crowdsec/config.yaml

@@ -47,5 +47,5 @@ api:
 prometheus:
   enabled: true
   level: full
-  listen_addr: "[::]"
+  listen_addr: "100.64.0.3"
   listen_port: 6060

services/crowdsec/crowdsec.yml

@@ -4,7 +4,7 @@ services:
       file: ${TEMPLATES_PATH}
       service: default
     container_name: crowdsec
-    image: crowdsecurity/crowdsec:v1.7.6
+    image: crowdsecurity/crowdsec:v1.7.7
     environment:
       COLLECTIONS: crowdsecurity/traefik crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules crowdsecurity/http-cve
       CROWDSEC_BOUNCER_API_KEY: ${CROWDSEC_API_KEY}

services/traefik/traefik.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: traefik:v3.6.10
+    image: traefik:v3.6.12
     container_name: traefik
     ports:
       - "80:80"
@@ -37,73 +37,74 @@ services:
       - "traefik.http.routers.traefik.entrypoints=https"
       - "traefik.http.routers.traefik.tls=true"
 
-  traefik-agent:
+<<<<<<< HEAD
-    extends:
+  # traefik-agent:
-      file: ${TEMPLATES_PATH}
+  #   extends:
-      service: default
+  #     file: ${TEMPLATES_PATH}
-    image: hhftechnology/traefik-log-dashboard-agent:3.0.0
+  #     service: default
-    container_name: traefik-log-dashboard-agent
+  #   image: hhftechnology/traefik-log-dashboard-agent:2.4.1
-    networks:
+  #   container_name: traefik-agent
-      - ip4net
+  #   networks:
-    ports:
+  #     - ip4net
-      - "8078:5000"
+  #   ports:
-    volumes:
+  #     - "8078:5000"
-      - "/var/log/traefik/:/logs:ro"
+  #   volumes:
-      - "${SERVICE_PATH}/traefik/log-dashboard/positions:/data"
+  #     - "/var/log/traefik/:/logs:ro"
-    environment:
+  #     - "${SERVICE_PATH}/traefik/log-dashboard/positions:/data"
-      TRAEFIK_LOG_DASHBOARD_ACCESS_PATH: /logs/access.log
+  #   environment:
-      TRAEFIK_LOG_DASHBOARD_AUTH_TOKEN: ${TRAEFIK_DASHBOARD_TOKEN}
+  #     TRAEFIK_LOG_DASHBOARD_ACCESS_PATH: /logs/access.log
-      TRAEFIK_LOG_DASHBOARD_SYSTEM_MONITORING: true
+  #     TRAEFIK_LOG_DASHBOARD_AUTH_TOKEN: ${TRAEFIK_DASHBOARD_TOKEN}
-      TRAEFIK_LOG_DASHBOARD_LOG_FORMAT: json
+  #     TRAEFIK_LOG_DASHBOARD_SYSTEM_MONITORING: true
-    deploy:
+  #     TRAEFIK_LOG_DASHBOARD_LOG_FORMAT: json
-      resources:
+  #   deploy:
-        limits:
+  #     resources:
-          cpus: "0.10"
+  #       limits:
-          memory: 50M
+  #         cpus: "0.15"
-    healthcheck:
+  #         memory: 50M
-      test:
+  #   healthcheck:
-        [
+  #     test:
-          "CMD",
+  #       [
-          "wget",
+  #         "CMD",
-          "--no-verbose",
+  #         "wget",
-          "--tries=1",
+  #         "--no-verbose",
-          "--spider",
+  #         "--tries=1",
-          "http://localhost:5000/api/logs/status",
+  #         "--spider",
-        ]
+  #         "http://localhost:5000/api/logs/status",
-      interval: 2m
+  #       ]
-      timeout: 10s
+  #     interval: 2m
-      retries: 3
+  #     timeout: 10s
-      start_period: 30s
+  #     retries: 3
-
+  #     start_period: 30s
-  traefik-dashboard:
+  #
-    extends:
+  # traefik-dashboard:
-      file: ${TEMPLATES_PATH}
+  #   extends:
-      service: default
+  #     file: ${TEMPLATES_PATH}
-    image: hhftechnology/traefik-log-dashboard:2.5.0
+  #     service: default
-    container_name: traefik-log-dashboard
+  #   image: hhftechnology/traefik-log-dashboard:2.4.1
-    networks:
+  #   container_name: traefik-dashboard
-      - ip4net
+  #   networks:
-    ports:
+  #     - ip4net
-      - "8077:3000"
+  #   ports:
-    volumes:
+  #     - "8077:3000"
-      - "${SERVICE_PATH}/traefik/log-dashboard/dashboard:/app/data"
+  #   volumes:
-      - "${SERVICE_PATH}/traefik/log-dashboard/positions:/data"
+  #     - "${SERVICE_PATH}/traefik/log-dashboard/dashboard:/app/data"
-    environment:
+  #     - "${SERVICE_PATH}/traefik/log-dashboard/positions:/data"
-      AGENT_API_URL: http://traefik-agent:5000
+  #   environment:
-      AGENT_API_TOKEN: ${TRAEFIK_DASHBOARD_TOKEN}
+  #     AGENT_API_URL: http://traefik-agent:5000
-      # Display Configuration
+  #     AGENT_API_TOKEN: ${TRAEFIK_DASHBOARD_TOKEN}
-      NEXT_PUBLIC_SHOW_DEMO_PAGE: false
+  #     # Display Configuration
-    depends_on:
+  #     NEXT_PUBLIC_SHOW_DEMO_PAGE: false
-      traefik-agent:
+  #   depends_on:
-        condition: service_healthy
+  #     traefik-agent:
-    deploy:
+  #       condition: service_healthy
-      resources:
+  #   deploy:
-        limits:
+  #     resources:
-          cpus: "0.1"
+  #       limits:
-          memory: 50M
+  #         cpus: "0.1"
-    labels:
+  #         memory: 120M
-      # traefik
+  #   labels:
-      - "traefik.enable=true"
+  #     # traefik
-      - "traefik.http.routers.traefik-log-dashboard.rule=Host(`traefik-dashboard.${LOCAL_VPS_DOMAIN}`)"
+  #     - "traefik.enable=true"
-      - "traefik.http.routers.traefik-log-dashboard.entrypoints=https"
+  #     - "traefik.http.routers.traefik-log-dashboard.rule=Host(`traefik-dashboard.${LOCAL_VPS_DOMAIN}`)"
-      - "traefik.http.routers.traefik-log-dashboard.tls=true"
+  #     - "traefik.http.routers.traefik-log-dashboard.entrypoints=https"
+  #     - "traefik.http.routers.traefik-log-dashboard.tls=true"