viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

reenable crowdsec on ingress once again [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2025-01-03 17:50:42 +00:00
parent e4644105a3
commit e754e6c80e
1 changed files with 11 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

13
modules/kubernetes/nginx-ingress/main.tf
View file

@ -328,8 +328,8 @@ resource "kubernetes_config_map" "ingress_nginx_controller" {
setvar:tx.block_harvester_ip=1,\ setvar:tx.block_harvester_ip=1,\
setvar:tx.block_spammer_ip=1" setvar:tx.block_spammer_ip=1"
EOT EOT
# plugins = "crowdsec" plugins = "crowdsec"
plugins = "" # plugins = ""
lua-shared-dicts = "crowdsec_cache: 50m" lua-shared-dicts = "crowdsec_cache: 50m"
http-snippet : <<-EOT http-snippet : <<-EOT
proxy_cache_path /tmp/nginx-cache levels=1:2 keys_zone=static-cache:2m max_size=100m inactive=7d use_temp_path=off; proxy_cache_path /tmp/nginx-cache levels=1:2 keys_zone=static-cache:2m max_size=100m inactive=7d use_temp_path=off;
@ -341,6 +341,15 @@ resource "kubernetes_config_map" "ingress_nginx_controller" {
lua_ssl_trusted_certificate "/etc/ssl/certs/ca-certificates.crt"; # Captcha lua_ssl_trusted_certificate "/etc/ssl/certs/ca-certificates.crt"; # Captcha
#resolver local=on ipv6=off valid=600s; #resolver local=on ipv6=off valid=600s;
EOT EOT
# first own works
# log-format-upstream : <<-EOT
# $remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" "$http_cf_connecting_ip" "$http_cf_ray" "$http_x_forwarded_for" "$host";
# EOT
# ketpt do debug why it's invalid syntax lol
# log-format-upstream : <<-EOT
# $remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" "$http_cf_connecting_ip" "$http_cf_ray" "$http_x_forwarded_for" "$host";
# EOT
} }
} }