hosts/test-nixos: enable crowdsec-firewall-bouncer

2025-11-09 17:47:43 -08:00
parent 89eb890905
commit 35485dda87
1 changed files with 9 additions and 0 deletions
--- a/hosts/test-nixos/default.nix
+++ b/hosts/test-nixos/default.nix
@@ -17,6 +17,15 @@
  qemu.enable = true;
  spice.enable = true;

+  sops.secrets = {
+    "crowdsec/firewallBouncerLapiKey" = { };
+  };
+
+  crowdsec-firewall-bouncer = {
+    enable = true;
+    apiKeyFile = config.sops.secrets."crowdsec/firewallBouncerLapiKey";
+  };
+
  base.userSSHKeys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILiUy2yjIkdryH7pYMdkCNryy9gceqXJ7bhtMvvpPBIk etorres@xenon"
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILPByHF+TF/4rsMtZ+HxZfwmNi83sia5t+OHjn8X7BHn etorres@radon"