lutz/Traefik
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add CrowdSec MikroTik bouncer (edge firewall drop)

Browse Source 
- New crowdsec-mikrotik-bouncer service: mirrors CrowdSec decisions into a
  RouterOS address-list on the AX3 for WAN edge-dropping (covers all ports,
  incl. VPN/SSH), complementing the L7 Traefik bouncer.
- Connects over api-ssl/TLS using an OpenBAO-issued cert; trusts the OpenBAO
  root+intermediate via SSL_CERT_FILE (crowdsec/famfi-ca-bundle.pem).
- Secrets (MIKROTIK_PASS, LAPI key) kept in root-only .mikrotik.env, git-ignored.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Lutz FInsterle
2026-06-28 16:17:59 +02:00
parent 1c2c2a5fe2
commit 34d11c0e29
3 changed files with 94 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.gitignore vendored Normal file
View File

@@ -0,0 +1,2 @@
.mikrotik.env
cred.adm