Commit graph

26 commits

Author SHA1 Message Date
Viktor Barzin
b4f68d99d8 [ci skip] Fix CrowdSec to monitor Traefik and add Slack notifications
- Switch acquisition from ingress-nginx to traefik namespace/pods
- Change collection from crowdsecurity/nginx to crowdsecurity/traefik
- Add Slack notification plugin for ban/captcha decisions
- Wire alertmanager_slack_api_url through to CrowdSec module
2026-02-11 22:25:03 +00:00
Viktor Barzin
b36932f9a3 Migrate all service modules from nginx-ingress to Traefik
- Remove nginx-specific ingress variables (use_proxy_protocol, proxy_timeout, additional_configuration_snippet)
- Update ingress annotations to use Traefik middleware CRDs
- Delete nginx-ingress module (replaced by traefik)
- Add new traefik middleware.tf for shared middleware definitions
- Update service modules to work with new ingress_factory interface
2026-02-07 13:25:49 +00:00
Viktor Barzin
751b83a53c Add crowdsec-blocklist-import CronJob
Import public threat intelligence blocklists into CrowdSec daily at 4 AM.
Uses kubectl exec to run the import script inside an existing CrowdSec
agent pod that is already registered with the LAPI.

Source: https://github.com/wolffcatskyy/crowdsec-blocklist-import

[ci skip]
2026-01-28 20:11:44 +00:00
Viktor Barzin
83545c6327 add crowdsec rule ot skip my home ip[ci skip] 2026-01-24 18:46:12 +00:00
Viktor Barzin
f1e9fb9afe add tier to all deployments [ci skip] 2026-01-10 16:28:14 +00:00
Viktor Barzin
b1486c1de7 increase leakspeed on 403 rule [ci skip] 2025-12-29 22:07:19 +00:00
Viktor Barzin
f1dde96d80 replace hardcoded namespace with module reference [ci skip] 2025-12-29 10:23:42 +00:00
Viktor Barzin
7afd3e758e add rybbit monitoring to ingresses [ci skip] 2025-12-18 08:53:19 +00:00
Viktor Barzin
dd5a097855 add a few more scenarios in crowdsec [ci skip] 2025-11-29 11:37:20 +00:00
Viktor Barzin
e737b482a2 relax the 403 abuse rule to reduce FP rate [ci skip] 2025-10-18 19:02:20 +00:00
Viktor Barzin
426d88e5e8 add deployment for crowdsec web dashboard that allows unblocking my ips [ci skip] 2025-10-14 20:09:35 +00:00
Viktor Barzin
f17d73cc62 add crowdsec policies for 403 and 429; use nginx to rate limit brute force attacks and then ban them [ci skip] 2025-10-13 20:12:37 +00:00
Viktor Barzin
13544d6b7c scale 3 instances of the lapi in crowdsec [ci skip] 2025-08-31 19:21:26 +00:00
Viktor Barzin
d79f15cc89 reenable crowdsec [ci skip] 2025-08-31 15:20:57 +00:00
Viktor Barzin
37faa3ffdc upgrade crowdsec to 19.4 [ci skip] 2025-05-04 11:25:39 +00:00
Viktor Barzin
529b07f849 scale nginx ingress to 3 replicas [ci skip] 2025-03-16 18:43:00 +00:00
Viktor Barzin
a33cbb272b scale crowdsec lapi to 3 replicas [ci skip] 2025-03-16 18:26:49 +00:00
Viktor Barzin
36bec0026e pin crowdsec version [ci skip] 2025-03-02 19:40:28 +00:00
Viktor Barzin
72d780c26f replace oauth proxy with authentik auth [ci skip] 2024-11-18 22:06:31 +00:00
Viktor Barzin
cf39034bdf add homepage module and some more integrations [ci skip] 2024-10-20 13:05:03 +00:00
Viktor Barzin
333a6c3ee4 enable the crowdsec online api [ci skip] 2023-11-25 13:44:06 +00:00
Viktor Barzin
3832abcf44 add nginx ignress bouncer to ingress controller [ci skip] 2023-11-25 13:34:15 +00:00
Viktor Barzin
c13226d769 set rolling update to lapi [ci skip] 2023-11-25 13:34:15 +00:00
Viktor Barzin
49c29eed45 add metabase secured ingress [ci skip] 2023-11-25 13:34:15 +00:00
Viktor Barzin
b628c92aee add metabase secured ingress [ci skip] 2023-11-24 19:04:44 +00:00
Viktor Barzin
e236a65c52 add crowdsec module [ci skip] 2023-11-24 11:08:25 +00:00