mirror of
https://github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin.git
synced 2026-07-21 19:48:59 +02:00
980a7dd05e
* Added Appsec Path config Variable * ✨ Add path env var for lapi and appsec * 🍱 Update README.md --------- Co-authored-by: Tobias Heinze <tobias.heinze@telekom.de> Co-authored-by: Max Lerebourg <maxlerebourg@gmail.com>
26 lines
1.0 KiB
Markdown
26 lines
1.0 KiB
Markdown
#### Generate CAPI credentials (only for `alone` mode)
|
|
You need to create a crowdsec API credentials for the CAPI.
|
|
You can follow the documentation here: https://docs.crowdsec.net/docs/central_api/intro
|
|
|
|
```bash
|
|
LOGIN=...
|
|
PASSWORD=...
|
|
curl -X POST "https://api.crowdsec.net/v2/watchers" -H "accept: application/json" -H "Content-Type: application/json" -d "{ \"password\": \"$PASSWORD\", \"machine_id\": \"$LOGIN\"}"
|
|
```
|
|
|
|
These CAPI credentials must be set in your docker-compose.yml or in your config files
|
|
```yaml
|
|
...
|
|
whoami:
|
|
labels:
|
|
- "traefik.http.middlewares.crowdsec.plugin.bouncer.enabled=true"
|
|
- "traefik.http.middlewares.crowdsec.plugin.bouncer.crowdsecMode=alone"
|
|
- "traefik.http.middlewares.crowdsec.plugin.bouncer.crowdsecCapiMachineId=LOGIN"
|
|
- "traefik.http.middlewares.crowdsec.plugin.bouncer.crowdsecCapiPassword=PASSWORD"
|
|
- "traefik.http.middlewares.crowdsec.plugin.bouncer.crowdsecCapiScenarios=crowdsecurity/http-generic-bf,crowdsecurity/http-xss-probing,..."
|
|
```
|
|
|
|
You can then run all the containers:
|
|
```bash
|
|
docker-compose up -d
|
|
``` |