middlewares

infrastructure/03-traefik/base/middlewares/crowdsec-bouncer.yaml

@@ -0,0 +1,12 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: bouncer
+  namespace: traefik
+spec:
+  plugin:
+    bouncer:
+      enabled: true
+      crowdsecMode: stream
+      crowdsecLapiScheme: https
+      crowdsecLapiHost: crowdsec-service.crowdsec:8080

infrastructure/03-traefik/base/middlewares/no-auth-chain.yaml

@@ -8,7 +8,7 @@ spec:
     middlewares:
       - name: ratelimit
       - name: compress
-      - name: error
+      # - name: error
       - name: xfwd-exclude
       - name: default-headers
       

infrastructure/03-traefik/base/middlewares/xfwd_exclude.yaml

@@ -6,9 +6,5 @@ metadata:
   namespace: traefik
 spec:
   ipAllowList:
-    ipStrategy:
-      sourceRange:
-        - 0.0.0.0/0
-      excludedIPs:
-        - 127.0.0.1/32
-        - 10.0.0.0/8
+    sourceRange:
+      - 0.0.0.0/0