Actualizando configuracion de stacks

stacks/traefik/dynamic/crafty.yml

@@ -0,0 +1,41 @@
+http:
+  routers:
+    crafty-web:
+      rule: Host(`crafty.skrd.fun`)
+      entryPoints:
+        - web
+      middlewares:
+        - redirect-to-https
+      service: noop
+
+    crafty:
+      rule: Host(`crafty.skrd.fun`)
+      entryPoints:
+        - websecure
+      service: crafty-svc
+      tls:
+        certResolver: cf
+      middlewares:
+        - crafty-headers
+
+  services:
+    crafty-svc:
+      loadBalancer:
+        servers:
+          - url: "https://192.168.3.3:8443"
+        serversTransport: crafty-transport
+
+    noop:
+      loadBalancer:
+        servers:
+          - url: "http://0.0.0.0"
+
+  middlewares:
+    crafty-headers:
+      headers:
+        customRequestHeaders:
+          X-Forwarded-Proto: https
+
+  serversTransports:
+    crafty-transport:
+      insecureSkipVerify: true

stacks/traefik/dynamic/home-assistant.yml

@@ -5,7 +5,6 @@ http:
       entryPoints:
         - web
       middlewares:
-        - local-only
         - redirect-to-https
       service: noop
     home-assistant:
@@ -15,8 +14,6 @@ http:
       service: home-assistant-svc
       tls:
         certResolver: cf
-      middlewares:
-        - local-only
   services:
     home-assistant-svc:
       loadBalancer:

stacks/traefik/dynamic/middlewares.yml

@@ -12,3 +12,25 @@ http:
       replacePathRegex:
         regex: ^/$
         replacement: /admin/
+    crowdsec:
+      plugin:
+        bouncer:
+          enabled: true
+          defaultDecisionSeconds: 60
+          crowdsecMode: live
+          crowdsecAppsecEnabled: true
+          crowdsecAppsecHost: crowdsec:7422
+          crowdsecAppsecFailureBlock: true
+          crowdsecAppsecUnreachableBlock: true
+          crowdsecLapiKey: mvBM8BzhJ1/P8Lcb72gsIn5JNgQCzwsRSKNuBJqJ/0Q
+          crowdsecLapiHost: crowdsec:8080
+          crowdsecLapiScheme: http
+          crowdsecLapiTLSInsecureVerify: false
+          forwardedHeadersTrustedIPs:
+            - 10.0.0.0/8
+            - 172.16.0.0/12
+            - 192.168.0.0/16
+          clientTrustedIPs:
+            - 10.0.0.0/8
+            - 172.16.0.0/12
+            - 192.168.0.0/16