rybbit sync: exclude CAPI + per_page=500 fix #6

Merged
viktor merged 1 commit from wizard/crowdsec-syncfix into master 2026-06-21 00:05:51 +00:00
Owner

Edge CF list carries only local/curated decisions (CAPI stays at L3 firewall-bouncer); fixes per_page>max cursor error. Verified live: list populates, sync exits 0.

Edge CF list carries only local/curated decisions (CAPI stays at L3 firewall-bouncer); fixes per_page>max cursor error. Verified live: list populates, sync exits 0.
viktor added 1 commit 2026-06-21 00:05:15 +00:00
The edge CF IP List can't hold the ~31k CAPI community blocklist (already
enforced in-kernel by the firewall-bouncer), so the sync now skips origin=CAPI
and carries only high-signal local/curated decisions (+ a 9000 safety cap).
Also fixes the list-items GET: per_page=1000 returned a misleading CF 400
'invalid or expired cursor' (10027); the endpoint max is 500. Verified live:
crowdsec_ban populates (4 IPs) and the sync exits 0.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
viktor merged commit 4f1c998468 into master 2026-06-21 00:05:51 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: viktor/infra#6
No description provided.