hosts/nbg-01: add config for crowdsec traefik bouncer

2025-10-18 15:23:22 -07:00
parent 2ab3816414
commit cd1c09f28e
1 changed files with 12 additions and 0 deletions
--- a/hosts/nbg-01/default.nix
+++ b/hosts/nbg-01/default.nix
@@ -29,6 +29,18 @@
  qemu.enable = true;
  spice.enable = true;

+  sops.secrets = {
+    "crowdsec/lapiKey" = {
+      owner = "traefik";
+      mode = "0400";
+    };
+  };
+
+  crowdsec-traefik-bouncer = {
+    enable = true;
+    lapiKeyFile = config.sops.secrets."crowdsec/lapiKey".path;
+  };
+
  traefik = {
    enable = true;
    redirectHttps = true;