viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

increase leakspeed on 403 rule [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2025-12-29 22:07:19 +00:00
parent d37c693a94
commit b1486c1de7
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/kubernetes/crowdsec/main.tf
View file

@ -35,7 +35,7 @@ resource "kubernetes_config_map" "crowdsec_custom_scenarios" {
description: "Detect IPs triggering too many HTTP 403s in NGINX ingress logs" description: "Detect IPs triggering too many HTTP 403s in NGINX ingress logs"
filter: "evt.Meta.log_type == 'http_access-log' && evt.Parsed.status == '403'" filter: "evt.Meta.log_type == 'http_access-log' && evt.Parsed.status == '403'"
groupby: "evt.Meta.source_ip" groupby: "evt.Meta.source_ip"
leakspeed: "30s" leakspeed: "2s"
capacity: 10 capacity: 10
blackhole: 5m blackhole: 5m
labels: labels: