Commit graph

26 commits

Author SHA1 Message Date
Viktor Barzin
9c3f8adc11
[ci skip] Fix CrowdSec to monitor Traefik and add Slack notifications
- Switch acquisition from ingress-nginx to traefik namespace/pods
- Change collection from crowdsecurity/nginx to crowdsecurity/traefik
- Add Slack notification plugin for ban/captcha decisions
- Wire alertmanager_slack_api_url through to CrowdSec module
2026-02-11 22:25:03 +00:00
Viktor Barzin
c32acc70e6
Migrate all service modules from nginx-ingress to Traefik
- Remove nginx-specific ingress variables (use_proxy_protocol, proxy_timeout, additional_configuration_snippet)
- Update ingress annotations to use Traefik middleware CRDs
- Delete nginx-ingress module (replaced by traefik)
- Add new traefik middleware.tf for shared middleware definitions
- Update service modules to work with new ingress_factory interface
2026-02-07 13:25:49 +00:00
Viktor Barzin
09a5e3a273
Add crowdsec-blocklist-import CronJob
Import public threat intelligence blocklists into CrowdSec daily at 4 AM.
Uses kubectl exec to run the import script inside an existing CrowdSec
agent pod that is already registered with the LAPI.

Source: https://github.com/wolffcatskyy/crowdsec-blocklist-import

[ci skip]
2026-01-28 20:11:44 +00:00
Viktor Barzin
0b58abc7b7
add crowdsec rule ot skip my home ip[ci skip] 2026-01-24 18:46:12 +00:00
Viktor Barzin
8abb8eddc0
add tier to all deployments [ci skip] 2026-01-10 16:28:14 +00:00
Viktor Barzin
2607714b31
increase leakspeed on 403 rule [ci skip] 2025-12-29 22:07:19 +00:00
Viktor Barzin
a3624f80e0
replace hardcoded namespace with module reference [ci skip] 2025-12-29 10:23:42 +00:00
Viktor Barzin
d51e0f7aaf
add rybbit monitoring to ingresses [ci skip] 2025-12-18 08:53:19 +00:00
Viktor Barzin
480b3e748d
add a few more scenarios in crowdsec [ci skip] 2025-11-29 11:37:20 +00:00
Viktor Barzin
0921bca454
relax the 403 abuse rule to reduce FP rate [ci skip] 2025-10-18 19:02:20 +00:00
Viktor Barzin
f9167965d2 add deployment for crowdsec web dashboard that allows unblocking my ips [ci skip] 2025-10-14 20:09:35 +00:00
Viktor Barzin
13b7c880e5
add crowdsec policies for 403 and 429; use nginx to rate limit brute force attacks and then ban them [ci skip] 2025-10-13 20:12:37 +00:00
Viktor Barzin
b5241b1a32
scale 3 instances of the lapi in crowdsec [ci skip] 2025-08-31 19:21:26 +00:00
Viktor Barzin
c17c1381c5
reenable crowdsec [ci skip] 2025-08-31 15:20:57 +00:00
Viktor Barzin
c3e66cdf89 upgrade crowdsec to 19.4 [ci skip] 2025-05-04 11:25:39 +00:00
Viktor Barzin
3f797c3741
scale nginx ingress to 3 replicas [ci skip] 2025-03-16 18:43:00 +00:00
Viktor Barzin
00050e82bf
scale crowdsec lapi to 3 replicas [ci skip] 2025-03-16 18:26:49 +00:00
Viktor Barzin
a0cc6a9568
pin crowdsec version [ci skip] 2025-03-02 19:40:28 +00:00
Viktor Barzin
185a944acd
replace oauth proxy with authentik auth [ci skip] 2024-11-18 22:06:31 +00:00
Viktor Barzin
64f81621c8 add homepage module and some more integrations [ci skip] 2024-10-20 13:05:03 +00:00
Viktor Barzin
47b7d7fe5f
enable the crowdsec online api [ci skip] 2023-11-25 13:44:06 +00:00
Viktor Barzin
aa324ef1d5 add nginx ignress bouncer to ingress controller [ci skip] 2023-11-25 13:34:15 +00:00
Viktor Barzin
e6ff305574 set rolling update to lapi [ci skip] 2023-11-25 13:34:15 +00:00
Viktor Barzin
efb8e99bc2 add metabase secured ingress [ci skip] 2023-11-25 13:34:15 +00:00
Viktor Barzin
e2b077f521
add metabase secured ingress [ci skip] 2023-11-24 19:04:44 +00:00
Viktor Barzin
fdb4d6228a
add crowdsec module [ci skip] 2023-11-24 11:08:25 +00:00