feat: remove crowdsec
This commit is contained in:
@@ -1,8 +1,4 @@
|
|||||||
{
|
{
|
||||||
crowdsec {
|
|
||||||
api_url http://crowdsec:8080
|
|
||||||
api_key {$CROWDSEC_API_KEY}
|
|
||||||
}
|
|
||||||
servers {
|
servers {
|
||||||
trusted_proxies static private_ranges
|
trusted_proxies static private_ranges
|
||||||
trusted_proxies_strict
|
trusted_proxies_strict
|
||||||
@@ -26,14 +22,12 @@
|
|||||||
|
|
||||||
auth.64815139.xyz {
|
auth.64815139.xyz {
|
||||||
route {
|
route {
|
||||||
crowdsec
|
|
||||||
reverse_proxy authelia:9091
|
reverse_proxy authelia:9091
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
www.64815139.xyz {
|
www.64815139.xyz {
|
||||||
route {
|
route {
|
||||||
crowdsec
|
|
||||||
import secure *
|
import secure *
|
||||||
|
|
||||||
root * /var/www/dashboard
|
root * /var/www/dashboard
|
||||||
@@ -52,7 +46,6 @@ www.64815139.xyz {
|
|||||||
|
|
||||||
gitea.64815139.xyz {
|
gitea.64815139.xyz {
|
||||||
route {
|
route {
|
||||||
crowdsec
|
|
||||||
rewrite /user/login /user/oauth2/Authelia
|
rewrite /user/login /user/oauth2/Authelia
|
||||||
reverse_proxy 192.168.0.216:3000
|
reverse_proxy 192.168.0.216:3000
|
||||||
}
|
}
|
||||||
@@ -60,21 +53,18 @@ gitea.64815139.xyz {
|
|||||||
|
|
||||||
immich.64815139.xyz {
|
immich.64815139.xyz {
|
||||||
route {
|
route {
|
||||||
crowdsec
|
|
||||||
reverse_proxy 192.168.0.216:2283
|
reverse_proxy 192.168.0.216:2283
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
uptime.64815139.xyz {
|
uptime.64815139.xyz {
|
||||||
route {
|
route {
|
||||||
crowdsec
|
|
||||||
reverse_proxy 192.168.0.216:4393
|
reverse_proxy 192.168.0.216:4393
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
oaT3cqYuCAegcoM4Xc4Pun1BUMOschxR.64815139.xyz {
|
oaT3cqYuCAegcoM4Xc4Pun1BUMOschxR.64815139.xyz {
|
||||||
route {
|
route {
|
||||||
crowdsec
|
|
||||||
reverse_proxy 192.168.0.216:4449
|
reverse_proxy 192.168.0.216:4449
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -4,9 +4,7 @@ FROM caddy:${CADDY_VERSION}-builder-alpine AS builder
|
|||||||
|
|
||||||
RUN xcaddy build \
|
RUN xcaddy build \
|
||||||
--with github.com/mholt/caddy-l4 \
|
--with github.com/mholt/caddy-l4 \
|
||||||
--with github.com/caddyserver/transform-encoder \
|
--with github.com/caddyserver/transform-encoder
|
||||||
--with github.com/hslatman/caddy-crowdsec-bouncer/http@main \
|
|
||||||
--with github.com/hslatman/caddy-crowdsec-bouncer/layer4@main
|
|
||||||
|
|
||||||
FROM caddy:${CADDY_VERSION} AS caddy
|
FROM caddy:${CADDY_VERSION} AS caddy
|
||||||
|
|
||||||
|
|||||||
@@ -1,4 +0,0 @@
|
|||||||
filenames:
|
|
||||||
- /var/log/caddy/*.log
|
|
||||||
labels:
|
|
||||||
type: caddy
|
|
||||||
@@ -84,39 +84,16 @@ services:
|
|||||||
context: ./caddy
|
context: ./caddy
|
||||||
target: caddy
|
target: caddy
|
||||||
container_name: gateway_caddy
|
container_name: gateway_caddy
|
||||||
depends_on:
|
|
||||||
- crowdsec
|
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
ports:
|
ports:
|
||||||
- "80:80"
|
- "80:80"
|
||||||
- "443:443"
|
- "443:443"
|
||||||
- "443:443/udp"
|
- "443:443/udp"
|
||||||
env_file:
|
|
||||||
- ./secrets/caddy/.env
|
|
||||||
volumes:
|
volumes:
|
||||||
- ./caddy/Caddyfile:/etc/caddy/Caddyfile
|
- ./caddy/Caddyfile:/etc/caddy/Caddyfile
|
||||||
- ./dashboard:/var/www/dashboard
|
- ./dashboard:/var/www/dashboard
|
||||||
- caddy_data:/data
|
- caddy_data:/data
|
||||||
- caddy_config:/config
|
- caddy_config:/config
|
||||||
networks:
|
|
||||||
crowdsec:
|
|
||||||
security_opt:
|
|
||||||
- no-new-privileges=true
|
|
||||||
crowdsec:
|
|
||||||
image: docker.io/crowdsecurity/crowdsec:latest
|
|
||||||
container_name: gateway_crowdsec
|
|
||||||
environment:
|
|
||||||
- GID=1000
|
|
||||||
- COLLECTIONS=crowdsecurity/caddy crowdsecurity/http-cve crowdsecurity/whitelist-good-actors
|
|
||||||
env_file:
|
|
||||||
- ./secrets/crowdsec/.env
|
|
||||||
volumes:
|
|
||||||
- ./crowdsec/data:/var/lib/crowdsec/data/
|
|
||||||
- ./caddy/crowdsec/acquis.yaml:/etc/crowdsec/acquis.yaml
|
|
||||||
- caddy_logs:/var/log/caddy:ro
|
|
||||||
networks:
|
|
||||||
crowdsec:
|
|
||||||
restart: unless-stopped
|
|
||||||
security_opt:
|
security_opt:
|
||||||
- no-new-privileges=true
|
- no-new-privileges=true
|
||||||
ddns:
|
ddns:
|
||||||
@@ -151,6 +128,3 @@ volumes:
|
|||||||
caddy_logs:
|
caddy_logs:
|
||||||
caddy_data:
|
caddy_data:
|
||||||
caddy_config:
|
caddy_config:
|
||||||
networks:
|
|
||||||
crowdsec:
|
|
||||||
driver: bridge
|
|
||||||
Reference in New Issue
Block a user