Add Crowdsec and Caddy bouncer to gateway

gateway/docker-compose.yml

@@ -80,18 +80,45 @@ services:
     volumes:
       - ./data/redis:/data
   caddy:
-    image: caddy:2.8.4-alpine
+    build:
+      context: ./caddy
+      target: caddy
     container_name: gateway_caddy
+    depends_on:
+      - crowdsec
     restart: unless-stopped
     ports:
       - "80:80"
       - "443:443"
       - "443:443/udp"
+    env_file:
+      - ./secrets/caddy/.env
     volumes:
       - ./caddy/Caddyfile:/etc/caddy/Caddyfile
       - ./dashboard:/var/www/dashboard
       - caddy_data:/data
       - caddy_config:/config
+    networks:
+      crowdsec:
+    security_opt:
+      - no-new-privileges=true
+  crowdsec:
+    image: docker.io/crowdsecurity/crowdsec:latest
+    container_name: gateway_crowdsec
+    environment:
+      - GID=1000
+      - COLLECTIONS=crowdsecurity/caddy crowdsecurity/http-cve crowdsecurity/whitelist-good-actors
+    env_file:
+      - ./secrets/crowdsec/.env
+    volumes:
+      - ./crowdsec/data:/var/lib/crowdsec/data/
+      - ./caddy/crowdsec/acquis.yaml:/etc/crowdsec/acquis.yaml
+      - caddy_logs:/var/log/caddy:ro
+    networks:
+      crowdsec:
+    restart: unless-stopped
+    security_opt:
+      - no-new-privileges=true
   ddns:
     image: timothyjmiller/cloudflare-ddns:latest
     container_name: gateway_cloudflare_ddns
@@ -121,5 +148,9 @@ services:
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
 volumes:
+  caddy_logs:
   caddy_data:
-  caddy_config:
+  caddy_config:
+networks:
+  crowdsec:
+    driver: bridge