|
|
80ee346387
|
services/crowdsec-firewall-bouncer: only use mkIf cfg.enable conditional
|
2025-10-18 22:44:23 -07:00 |
|
|
|
fba44b786d
|
services: add crowdsec-firewall-bouncer module
|
2025-10-18 22:43:58 -07:00 |
|
|
|
3d0a91417b
|
services/healthchecks: use healthchecks name in opt example
|
2025-10-18 21:45:40 -07:00 |
|
|
|
2e8156f2fe
|
flake.lock: update 2025-10-18
|
2025-10-18 15:39:32 -07:00 |
|
|
|
e8ea6dd73b
|
base/secrets: fix missing age subdir in ageKeyDir
|
2025-10-18 15:33:33 -07:00 |
|
|
|
274b059311
|
base/secrets: var usage sopsDir -> ageKeyDir
|
2025-10-18 15:30:12 -07:00 |
|
|
|
3a46f6b4de
|
base/secrets: add tmpfiles rules for creating key storage file
|
2025-10-18 15:27:41 -07:00 |
|
|
|
cd1c09f28e
|
hosts/nbg-01: add config for crowdsec traefik bouncer
|
2025-10-18 15:23:22 -07:00 |
|
|
|
2ab3816414
|
secrets/nbg-01: add crowdsec lapiKey
|
2025-10-18 15:20:35 -07:00 |
|
|
|
3ca64a9ba6
|
sops.yaml: add key for nbg-01
|
2025-10-18 15:19:42 -07:00 |
|
|
|
6fc106abad
|
hosts/lax-01: set permission for bouncer key to traefik
|
2025-10-18 15:08:55 -07:00 |
|
|
|
2b19bc29d7
|
services/crowdsec-traefik-bouncer: rename bouncer plugin instance
|
2025-10-18 14:57:02 -07:00 |
|
|
|
32a19f6acb
|
services/traefik: set service's working directory
|
2025-10-18 14:52:29 -07:00 |
|
|
|
1ad5628ee9
|
services/crowdsec-traefik-bouncer: update comment about tmpfiles
|
2025-10-18 14:40:50 -07:00 |
|
|
|
111506f08c
|
services/crowdsec: add rules to create credentials files
|
2025-10-18 14:39:48 -07:00 |
|
|
|
e52a73d1a5
|
services/crowdsec-traefik-bouncer: create subdirectory sources under plugins-storage
|
2025-10-18 14:37:03 -07:00 |
|
|
|
bbb6fc8059
|
services/crowdsec-traefik-bouncer: create directory for plugins storage
|
2025-10-18 14:31:55 -07:00 |
|
|
|
45f4e1af44
|
services/crowdsec-traefik-bouncer: fix section of middlewares for bouncer
|
2025-10-18 14:28:57 -07:00 |
|
|
|
19c28ebe3c
|
services/crowdsec-traefik-bouncer: var lapiAddress -> lapiHost
|
2025-10-18 14:19:44 -07:00 |
|
|
|
a4a24c82df
|
secrets/lax-01: add lapi key for bouncer
|
2025-10-18 14:19:24 -07:00 |
|
|
|
a373364c25
|
hosts/lax-01: enable crowdsec-traefik-bouncer module
|
2025-10-18 13:52:24 -07:00 |
|
|
|
a55d163bae
|
hosts/log-01: consolidate sops.secrets blocks
|
2025-10-18 13:50:37 -07:00 |
|
|
|
60762435f5
|
services/crowdsec-traefik-bouncer: fix scope of lapiKeyFile
|
2025-10-18 13:14:09 -07:00 |
|
|
|
c1ac126dd4
|
services/crowdsec-traefik-bouncer: reorder config opts
|
2025-10-18 13:13:36 -07:00 |
|
|
|
f44b992c43
|
services/crowdsec-traefik-bouncer: simplify conditional logic for config
|
2025-10-18 13:08:53 -07:00 |
|
|
|
36199bb371
|
services/crowdsec-traefik-bouncer: change opt environmentFile to lapiKeyFile
|
2025-10-18 13:06:52 -07:00 |
|
|
|
8e2a38ef28
|
services/crowdsec-traefik-bouncer: set mode to stream
|
2025-10-18 13:05:03 -07:00 |
|
|
|
44f65b5898
|
services/crowdsec-traefik-bouncer: update plugin to v1.4.5
|
2025-10-18 13:04:01 -07:00 |
|
|
|
63bd818ca1
|
services/services: add crowdsec-traefik-bouncer module
|
2025-10-18 12:55:54 -07:00 |
|
|
|
4f9ab47202
|
services/crowdsec-traefik-bouncer: initial implementation
|
2025-10-18 12:55:04 -07:00 |
|
|
|
1d54f46eb5
|
services/crowdsec: move EnvironmentFile opt into module
|
2025-10-18 12:39:56 -07:00 |
|
|
|
81ead270fb
|
services/crowdsec: disable autoUpdateService
|
2025-10-18 12:09:08 -07:00 |
|
|
|
80f3ddd7af
|
services/crowdsec: misc formatting cleanup
|
2025-10-15 23:05:22 -07:00 |
|
|
|
33b25a71c6
|
Merge branch 'services'
|
2025-10-15 23:01:49 -07:00 |
|
|
|
bc2a2772ad
|
services/crowdsec: enable alloy monitoring
|
2025-10-15 23:01:08 -07:00 |
|
|
|
12ff87a782
|
Merge branch 'services'
|
2025-10-15 22:51:34 -07:00 |
|
|
|
aa7acf9730
|
services/crowdsec: hardcode port
|
2025-10-15 22:44:32 -07:00 |
|
|
|
b63e67cd15
|
services/crowdsec: quote port number
|
2025-10-15 22:39:55 -07:00 |
|
|
|
1e56f160f4
|
Revert "secrets/log-01_crowdsec.env: change type of port to str"
This reverts commit 09d099d17c.
|
2025-10-15 22:39:29 -07:00 |
|
|
|
4b7fd600a3
|
services/crowdsec: double quote port
|
2025-10-15 22:38:38 -07:00 |
|
|
|
a0c4454767
|
services/crowdsec: add cscli to systemPackages
|
2025-10-15 22:29:04 -07:00 |
|
|
|
09d099d17c
|
secrets/log-01_crowdsec.env: change type of port to str
|
2025-10-15 21:57:46 -07:00 |
|
|
|
a628d97de1
|
hosts/log-01: disable postgres database
|
2025-10-15 21:55:52 -07:00 |
|
|
|
045d6a8aaf
|
secrets/log-01_crowdsec.env: set db-pg17 as host for postgres
|
2025-10-15 21:54:11 -07:00 |
|
|
|
684e5daf54
|
roles/dockerserver: use SupplementaryGroups instead of changing traefik group
|
2025-10-15 21:05:31 -07:00 |
|
|
|
34988422b5
|
services/crowdsec: pull traefik logs by job traefik_access_logs
|
2025-10-15 20:50:19 -07:00 |
|
|
|
86c9d43619
|
Merge branch 'main' into services
|
2025-10-15 18:59:28 -07:00 |
|
|
|
6f57ffc2f3
|
roles/minecraftserver: misc formatting cleanup
|
2025-10-15 18:59:08 -07:00 |
|
|
|
da4cbd2728
|
roles/minecraftserver: add alloy collector to minecraft group
|
2025-10-15 18:58:26 -07:00 |
|
|
|
d5f7fba45c
|
services/traefik: fix typo in loki source file
|
2025-10-15 18:55:07 -07:00 |
|
