davide/fleet-infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: enable CrowdSec Traefik bouncer on all ingresses

Browse Source 
- Add Traefik plugin via HelmChartConfig (crowdsec-bouncer-traefik-plugin)
- Create bouncer Middleware in stream mode
- Apply bouncer to all public ingresses
- IPs flagged by CrowdSec will now be blocked at Traefik level
This commit is contained in:
Davide Piu
2026-02-19 23:53:00 +00:00
parent d628dd2c67
commit d19ede0559
6 changed files with 34 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
clusters/lab/apps/gatus.yaml
View File

@@ -43,7 +43,7 @@ spec:
ingressClassName: traefik
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: default-authelia-forwardauth@kubernetescrd,default-redirect-https@kubernetescrd
traefik.ingress.kubernetes.io/router.middlewares: default-crowdsec-bouncer@kubernetescrd,default-authelia-forwardauth@kubernetescrd,default-redirect-https@kubernetescrd
hosts:
- status.davidepiu.xyz
tls: