Ruakij/Ansible-roles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Whitelist the public_ips of every inventory host in crowdsec and keep a LAPI allowlist equal to the whitelist

Browse Source
This commit is contained in:
Ruakij
2026-10-08 09:19:51 +00:00
parent d345ccf585
commit fd73949412
4 changed files with 48 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crowdsec/defaults/main.yml
+8 -1
View File
@@ -10,8 +10,15 @@ crowdsec:
scenarios: {}
# path below /etc/crowdsec -> content, for local parsers and scenarios.
local_files: {}
# name -> CIDR (single addresses as /32 or /128) never acted upon by this agent.
# name -> CIDR (single addresses as /32 or /128) never acted upon. Joined by
# the public_ips (same format) of every inventory host, then whitelisted by
# this agent and, when lapi_allowlist is set, allowlisted on the LAPI.
whitelist: {}
# LAPI allowlist kept equal to the whitelist; it also drops alerts on ranges
# holding a whitelisted address, which a parser whitelist cannot.
lapi_allowlist: ""
# Host whose k3s kubectl reaches the LAPI pod (crowdsec/crowdsec-lapi).
lapi_kubectl_host: ""
# name -> acquisition datasource, written to /etc/crowdsec/acquis.d/<name>.yaml.
acquisition: {}
# packagecloud has no trixie suite yet; the bookworm build is static Go.