viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

CrowdSec real enforcement: edge WAF (proxied) + firewall-bouncer (direct) #2

Merged
viktor merged 6 commits from wizard/crowdsec-enforcement into master 2026-06-20 09:42:41 +00:00
Conversation 0 Commits 6 Files changed 6 +2 -2
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit ca8d617e72 - Show all commits

4
stacks/rybbit/crowdsec_edge.tf
View file

@ -154,8 +154,8 @@ resource "cloudflare_api_token" "list_sync" {
policy {
effect = "allow"
permission_groups = [
data.cloudflare_api_token_permission_groups.all.account["Account Filter Lists Edit"],
data.cloudflare_api_token_permission_groups.all.account["Account Filter Lists Read"],
data.cloudflare_api_token_permission_groups.all.account["Account Rule Lists Write"],
data.cloudflare_api_token_permission_groups.all.account["Account Rule Lists Read"],
]
resources = {
"com.cloudflare.api.account.${local.cf_account_id}" = "*"