hosts: enable crowdsec-firewall-bouncer module for web-exposed hosts

hosts/hel-01/default.nix

@@ -29,6 +29,10 @@
   qemu.enable = true;
   spice.enable = true;
 
+  crowdsec-firewall-bouncer = {
+    enable = true;
+  };
+
   base.userSSHKeys = [
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF3oNF68M+TaN8LB+jQH9hFaW3vpR3i54UiVRPqJxyAN etorres@xenon"
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIISjU0h15s29Ir6ANHNujlOO0/7+bGvkpbpN6WzVhgW6 etorres@radon"

hosts/lax-01/default.nix

@@ -52,6 +52,10 @@
   };
   ntfy.enable = true;
 
+  crowdsec-firewall-bouncer = {
+    enable = true;
+  };
+
   crowdsec-traefik-bouncer = {
     enable = true;
     lapiKeyFile = config.sops.secrets."crowdsec/lapiKey".path;

hosts/nbg-01/default.nix

@@ -36,6 +36,10 @@
     };
   };
 
+  crowdsec-firewall-bouncer = {
+    enable = true;
+  };
+
   crowdsec-traefik-bouncer = {
     enable = true;
     lapiKeyFile = config.sops.secrets."crowdsec/lapiKey".path;