feat(k8s): protect all prod routers with crowdsec middleware

adguardhome/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`adguard.forust.xyz`) || Host(`dns.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
       services:
         - name: adguard-service
           port: 3000
@@ -41,6 +43,8 @@ spec:
   routes:
     - match: (Host(`adguard.forust.xyz`) || Host(`dns.forust.xyz`)) && PathPrefix(`/dns-query`)
       kind: Rule
+      middlewares:
+        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
       services:
         - name: adguard-service
           port: 3000

authentik/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`auth.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
       services:
         - name: authentik-server-service
           port: 9000

checkmk/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`cmk.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
       services:
         - name: checkmk-service
           port: 5000

dockmon/k8s/ingress.yaml

@@ -18,6 +18,7 @@ spec:
     - match: Host(`dockmon.forust.xyz`)
       kind: Rule
       middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
         - name: security-headers@file
       services:
         - name: dockmon-service

downtify/k8s/ingress.yaml

@@ -10,6 +10,7 @@ spec:
     - match: Host(`downtify.forust.xyz`)
       kind: Rule
       middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
         - name: security-chain@file
       services:
         - name: downtify-service

headscale/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`hs.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
       services:
         - name: headscale-server-external
           port: 8080
@@ -43,6 +45,7 @@ spec:
     - match: Host(`hs.forust.xyz`) && PathPrefix(`/admin`)
       kind: Rule
       middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
         - name: security-chain@file
       services:
         - name: headscale-ui-external
@@ -77,6 +80,8 @@ spec:
   routes:
     - match: Host(`hs.forust.xyz`) && PathPrefix(`/metrics`)
       kind: Rule
+      middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
       services:
         - name: headscale-server-external
           port: 9090

homepages/k8s/ingress.yaml

@@ -45,6 +45,8 @@ spec:
   routes:
     - match: Host(`xdfnx.cfd`) || Host(`www.xdfnx.cfd`)
       kind: Rule
+      middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
       services:
         - name: xdfnx-homepage-service
           port: 80

kener/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`status.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
       services:
         - name: kener-service
           port: 3000

n8n/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`n8n.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
       services:
         - name: n8n-service
           port: 5678

netronome/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`nm.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
       services:
         - name: netronome-service
           port: 7575

nextcloud/k8s/ingress.yaml

@@ -31,6 +31,7 @@ spec:
     - match: HostRegexp(`^nextcloud\.(workstation|gigaforust)\.internal$`)
       kind: Rule
       middlewares:
+        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
         - name: nextcloud-chain@file
       services:
         - name: nextcloud-apache

portainer/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`portainer.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
       services:
         - name: portainer-service
           port: 9000

searxng/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`s.forust.xyz`) || Host(`search.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
       services:
         - name: searxng-service
           port: 8080

termix/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`termix.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
       services:
         - name: termix-service
           port: 8080

traefik/k8s/ingress.yaml

@@ -10,6 +10,8 @@ spec:
   routes:
     - match: Host(`traefik.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
       services:
         - name: api@internal
           kind: TraefikService

uptime-kuma/k8s/ingress.yaml

@@ -9,6 +9,8 @@ spec:
   routes:
     - match: Host(`uptime.forust.xyz`)
       kind: Rule
+      middlewares:
+        - name: crowdsec-crowdsec-bouncer@kubernetescrd
       services:
         - name: uptime-kuma-service
           port: 3001