feat(k8s): protect all prod routers with crowdsec middleware

2026-06-17 01:50:33 +02:00
parent 76853637bc
commit b9b8474455
16 changed files with 34 additions and 0 deletions
@@ -9,6 +9,8 @@ spec:
  routes:
    - match: Host(`hs.forust.xyz`)
      kind: Rule
+      middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
      services:
        - name: headscale-server-external
          port: 8080
@@ -43,6 +45,7 @@ spec:
    - match: Host(`hs.forust.xyz`) && PathPrefix(`/admin`)
      kind: Rule
      middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
        - name: security-chain@file
      services:
        - name: headscale-ui-external
@@ -77,6 +80,8 @@ spec:
  routes:
    - match: Host(`hs.forust.xyz`) && PathPrefix(`/metrics`)
      kind: Rule
+      middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
      services:
        - name: headscale-server-external
          port: 9090