CF account hard-limits to 1 Rules List, so proxied enforcement uses one crowdsec_ban list + one WAF block rule; the sync writes both ban and captcha decisions into it (captcha downgraded to block at the edge). Drops the second list + managed_challenge rule. Trivial touch to firewall_bouncer.tf to make CI re-apply crowdsec and recreate the DaemonSet (tar fix already in master; stale orphan was cleared). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| worker | ||
| .terraform.lock.hcl | ||
| crowdsec_edge.tf | ||
| lapi_kv_sync.py | ||
| main.tf | ||
| providers.tf | ||
| secrets | ||
| terragrunt.hcl | ||