Add caddy-cloudflare-crowdsec
This commit is contained in:
58
caddy-cloudflare-crowdsec/docker-compose.yml
Normal file
58
caddy-cloudflare-crowdsec/docker-compose.yml
Normal file
@@ -0,0 +1,58 @@
|
|||||||
|
services:
|
||||||
|
crowdsec:
|
||||||
|
image: ghcr.io/crowdsecurity/crowdsec:v1.6.9
|
||||||
|
container_name: crowdsec
|
||||||
|
networks:
|
||||||
|
proxy:
|
||||||
|
ipv4_address: 172.30.0.3
|
||||||
|
environment:
|
||||||
|
- BOUNCER_KEY_CADDY=${CROWDSEC_API_KEY}
|
||||||
|
- GID=${GID}
|
||||||
|
- COLLECTIONS=${COLLECTIONS}
|
||||||
|
volumes:
|
||||||
|
- ${APPDATA_PATH}/caddy-crowdsec/crowdsec-acquis.d:/etc/crowdsec/acquis.d
|
||||||
|
- ${APPDATA_PATH}/caddy-crowdsec/crowdsec-db:/var/lib/crowdsec/data/
|
||||||
|
- ${APPDATA_PATH}/caddy-crowdsec/crowdsec-config:/etc/crowdsec/
|
||||||
|
- ${APPDATA_PATH}/caddy-crowdsec/caddy-logs:/var/log/caddy:ro
|
||||||
|
restart: unless-stopped
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD-SHELL", "wget --spider --quiet --tries=1 --timeout=5 http://localhost:8080/health > /dev/null 2>&1 || exit 1"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 30s
|
||||||
|
|
||||||
|
caddy:
|
||||||
|
image: docker.io/ryuupendragon/caddy-cloudflare-crowdsec:2.10.0
|
||||||
|
container_name: caddy
|
||||||
|
depends_on:
|
||||||
|
crowdsec:
|
||||||
|
condition: service_healthy
|
||||||
|
cap_add:
|
||||||
|
- NET_ADMIN
|
||||||
|
networks:
|
||||||
|
proxy:
|
||||||
|
ipv4_address: 172.30.0.2
|
||||||
|
environment:
|
||||||
|
- CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
|
||||||
|
- CROWDSEC_API_KEY=${CROWDSEC_API_KEY}
|
||||||
|
volumes:
|
||||||
|
- ${APPDATA_PATH}/caddy-crowdsec/caddy-file:/etc/caddy
|
||||||
|
- ${APPDATA_PATH}/caddy-crowdsec/caddy-config:/config
|
||||||
|
- ${APPDATA_PATH}/caddy-crowdsec/caddy-data:/data
|
||||||
|
- ${APPDATA_PATH}/caddy-crowdsec/caddy-logs:/logs
|
||||||
|
- ${APPDATA_PATH}/caddy-crowdsec/caddy-srv:/srv
|
||||||
|
ports:
|
||||||
|
- ${HTTP_PORT}:80
|
||||||
|
- ${HTTPS_PORT}:443
|
||||||
|
- ${HTTPS_PORT}:443/udp
|
||||||
|
restart: unless-stopped
|
||||||
|
|
||||||
|
networks:
|
||||||
|
proxy:
|
||||||
|
name: proxy
|
||||||
|
driver: bridge
|
||||||
|
ipam:
|
||||||
|
config:
|
||||||
|
- subnet: 172.30.0.0/16
|
||||||
|
gateway: 172.30.0.1
|
||||||
Reference in New Issue
Block a user