etorres/nixos
0
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

hosts/gms-01: enable crowdsec-firewall-bouncer

Browse Source
This commit is contained in:
Eric Torres
2025-11-10 15:37:09 -08:00
parent 73f1f93e69
commit 6c7bb2b2a9
2 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
hosts/gms-01/default.nix
View File

@@ -58,6 +58,7 @@ in
sops.secrets = { sops.secrets = {
"borgmatic_pass/local" = { }; "borgmatic_pass/local" = { };
"borgmatic_pass/remote" = { }; "borgmatic_pass/remote" = { };
"crowdsec/fwBouncerLapiKey" = { };
"RCON_PASS" = { "RCON_PASS" = {
sopsFile = ../../secrets/gms-01_rcon.env; sopsFile = ../../secrets/gms-01_rcon.env;
format = "binary"; format = "binary";
@@ -66,6 +67,11 @@ in
}; };
}; };
crowdsec-firewall-bouncer = {
enable = true;
apiKeyFile = config.sops.secrets."crowdsec/fwBouncerLapiKey".path;
};
services.minecraft-servers = { services.minecraft-servers = {
enable = true; enable = true;
eula = true; eula = true;

8
secrets/gms-01.yml
View File

@@ -1,6 +1,8 @@
borgmatic_pass: borgmatic_pass:
local: ENC[AES256_GCM,data:5LiWm58yflouxj78AGLfznlpLiI=,iv:XXnZehazpPQ4brD/c8/zpaWdsoyhJ+w8lsaomsUqEw0=,tag:S0GkYHYa1peDIcMcTEYijQ==,type:str] local: ENC[AES256_GCM,data:5LiWm58yflouxj78AGLfznlpLiI=,iv:XXnZehazpPQ4brD/c8/zpaWdsoyhJ+w8lsaomsUqEw0=,tag:S0GkYHYa1peDIcMcTEYijQ==,type:str]
remote: ENC[AES256_GCM,data:X+vczjxB3RbDTZSQOtFMUa6o36E=,iv:x85uM6CQeIJSxDySy/msTWcf0UEVr73fICRdzgfYRRc=,tag:SdkTBCUawA+TV1DFiUrBXg==,type:str] remote: ENC[AES256_GCM,data:X+vczjxB3RbDTZSQOtFMUa6o36E=,iv:x85uM6CQeIJSxDySy/msTWcf0UEVr73fICRdzgfYRRc=,tag:SdkTBCUawA+TV1DFiUrBXg==,type:str]
crowdsec:
fwBouncerLapiKey: ENC[AES256_GCM,data:LEcwHD/LSImR0cawY5y1AkLggKGu/z0tzt1+/bVNIMLvnL/Wv+4I47WgWA==,iv:Chh1vVJp/RR78f92ikTXyalZJj2zKhH6FfaTJETmxB8=,tag:W/S+3jJba1Ek0D7d7K+3Dg==,type:str]
minecraft: minecraft:
rcon_pass: ENC[AES256_GCM,data:Vtl4LU/Eqmxlga5+UgP7W2TJC3M=,iv:nzoYjAHjSxrySNgV2ChECKjBZZsrkorFj+2/PiZFekk=,tag:6p8MYfzJcQCV6F1YiQ7e/A==,type:str] rcon_pass: ENC[AES256_GCM,data:Vtl4LU/Eqmxlga5+UgP7W2TJC3M=,iv:nzoYjAHjSxrySNgV2ChECKjBZZsrkorFj+2/PiZFekk=,tag:6p8MYfzJcQCV6F1YiQ7e/A==,type:str]
sops: sops:
@@ -32,7 +34,7 @@ sops:
Vkd2OHViTTJGKy93VlNwd0dRRzczaU0Kj1JdzBe55rgS1sMIzoWZF+pIbKy+Io0z Vkd2OHViTTJGKy93VlNwd0dRRzczaU0Kj1JdzBe55rgS1sMIzoWZF+pIbKy+Io0z
ejVdBnie4SOz0qtPwf/Jf7TeCzO4J4yIYfFR6e7wV/2fjz3PlrfNdA== ejVdBnie4SOz0qtPwf/Jf7TeCzO4J4yIYfFR6e7wV/2fjz3PlrfNdA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-08-24T06:07:56Z" lastmodified: "2025-11-10T23:36:55Z"
mac: ENC[AES256_GCM,data:bh2xJBMCCr0FKgg3B9BKys7tN3F77B9G4dYHUqk05Jc1kfrlQuZevchFFgOW3hmjJwDSC+HC4dmOxkvkoJ9gKjG6Y66qVuM7pR2F9H/BXJepmAvY1BMo8ZUXTFOt+pRDx6v1cqZmrbyA/vxOpfnmRSeTCLPTHhA/qwHDWBOaIEA=,iv:9V4g2faA8++wUTNySsed0tcV4BA/7l3tWgQeo5gjdDs=,tag:F3Zeb71Xs5XLuOicoTqdlA==,type:str] mac: ENC[AES256_GCM,data:pVTtbtLt95TJ4fWQIjuqtf8lQnBznKH978X7V/u5DPK39zy2FaQOXrZ+TC6DP7IIwS547worj1KoS404zM9ygEJ31RWnngpcKMRLGzYCk0dAPtD763szS48gpFs1C/9R8f1a6o4M2Vz1fohx9FGMeQ1YzkctvXjiAV03z8qFDf0=,iv:Uktt3or+knsWi+pQaOl4eEieovGTmBUzCtBPLGDZ9R8=,tag:1ngkyvc99F/WUQfvxlkwNw==,type:str]
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.10.2 version: 3.11.0