new file: crowdsec/Dockerfile

new file: default-environment.env new file: docker-compose.yml new file: docker-exporter/Dockerfile new file: docker-exporter/Dockerfile.old new file: docker-exporter/TEST_EXAMPLE.md new file: docker-exporter/exporter.py new file: docker-exporter/exporter.py.old new file: services-up.sh new file: telegraf.conf new file: traefik/certs/.gitkeep new file: traefik/dynamic.yml new file: traefik/letsencrypt/acme.json new file: traefik/traefik.yml
2026-04-14 08:09:33 +10:00
parent 1141f452a8
commit bb00e8684d
14 changed files with 1421 additions and 0 deletions
@@ -0,0 +1,27 @@
+http:
+  middlewares:
+    crowdsec:
+      plugin:
+        crowdsec-bouncer:
+          crowdsecMode: live
+          crowdsecLapiKey: HeneLa2mazFVzl5+DQRKOdchBuJxKdjrHsHBE/03Acs
+          crowdsecLapiHost: crowdsec:8080
+          crowdsecLapiScheme: http
+
+    secHeaders:
+        headers:
+            browserXssFilter: true
+            contentTypeNosniff: true
+            frameDeny: true
+#            sslRedirect: true
+       #HSTS Configuration
+            stsIncludeSubdomains: true
+            stsPreload: true
+            stsSeconds: 15552000
+            forceSTSHeader: true
+            customFrameOptionsValue: "SAMEORIGIN"
+    default-chain:
+      chain:
+        middlewares:
+          - secHeaders
+          - crowdsec
@@ -0,0 +1,58 @@
+api:
+  dashboard: true
+  insecure: true   # keep false if exposing via router
+ping: {}
+
+log:
+  level: INFO
+
+accessLog:
+  filePath: /logs/access.log
+  format: json
+
+entryPoints:
+  web:
+    address: ":80"
+    http:
+      redirections:
+        entryPoint:
+          to: websecure
+          scheme: https
+
+  websecure:
+    address: ":443"
+    http:
+      middlewares:
+        - default-chain@file
+
+providers:
+  docker:
+    endpoint: "tcp://docker-socket-proxy:2375"
+    exposedByDefault: false
+  file:
+    filename: /etc/traefik/dynamic.yml
+    watch: true
+
+experimental:
+  plugins:
+    crowdsec-bouncer:
+      moduleName: github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin
+      version: v1.4.2
+
+certificatesResolvers:
+  le:
+    acme:
+      email: wayne.bennett@live.com
+      storage: /letsencrypt/acme.json
+      httpChallenge:
+        entryPoint: web
+metrics:
+  prometheus:
+#    entryPoint: metrics:9100          # optional, default is "metrics"
+    buckets:
+      - 0.1
+      - 0.3
+      - 1.2
+      - 5.0
+    addEntryPointsLabels: true   # add labels for each entrypoint
+    addServicesLabels: true      # add labels for each service