chore: adjust crowdsec middleware

This commit is contained in:
LRVT 2024-10-22 13:57:55 +02:00 committed by GitHub
parent 9740c4c1dc
commit ce62790b06
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -95,26 +95,20 @@ http:
# plugin: # plugin:
# bouncer: # bouncer:
# enabled: true # enabled: true
# updateIntervalSeconds: 60
# updateMaxFailure: 0
# defaultDecisionSeconds: 60 # defaultDecisionSeconds: 60
# httpTimeoutSeconds: 10
# crowdsecMode: live # crowdsecMode: live
# crowdsecAppsecFailureBlock: true # crowdsecAppsecFailureBlock: true
# crowdsecAppsecUnreachableBlock: true # crowdsecAppsecUnreachableBlock: true
# crowdsecLapiKey: $CROWDSEC-BOUNCER-API-TOKEN # crowdsecLapiKey: FIXME-LAPI-KEY # <--- replace this later
# crowdsecLapiHost: crowdsec:8080 # crowdsecLapiHost: crowdsec:8080
# crowdsecLapiScheme: http # crowdsecLapiScheme: http
# crowdsecLapiTLSInsecureVerify: false # crowdsecLapiTLSInsecureVerify: false
# crowdsecCapiScenarios:
# - crowdsecurity/traefik
# - crowdsecurity/http-cve
# - crowdsecurity/appsec-virtual-patching
# - crowdsecurity/appsec-generic-rules
# forwardedHeadersTrustedIPs: # forwardedHeadersTrustedIPs:
# # private class ranges
# - 10.0.0.0/8 # - 10.0.0.0/8
# - 172.16.0.0/12 # - 172.16.0.0/12
# - 192.168.0.0/16 # - 192.168.0.0/16
# # cloudflare ipv4
# - 103.21.244.0/22 # - 103.21.244.0/22
# - 103.22.200.0/22 # - 103.22.200.0/22
# - 103.31.4.0/22 # - 103.31.4.0/22
@ -130,6 +124,7 @@ http:
# - 190.93.240.0/20 # - 190.93.240.0/20
# - 197.234.240.0/22 # - 197.234.240.0/22
# - 198.41.128.0/17 # - 198.41.128.0/17
# # cloudflare ipv6
# - 2400:cb00::/32 # - 2400:cb00::/32
# - 2606:4700::/32 # - 2606:4700::/32
# - 2803:f800::/32 # - 2803:f800::/32
@ -138,6 +133,7 @@ http:
# - 2a06:98c0::/29 # - 2a06:98c0::/29
# - 2c0f:f248::/32 # - 2c0f:f248::/32
# clientTrustedIPs: # clientTrustedIPs:
# # private class ranges
# - 10.0.0.0/8 # - 10.0.0.0/8
# - 172.16.0.0/12 # - 172.16.0.0/12
# - 192.168.0.0/16 # - 192.168.0.0/16