feat: implement modular security services with CrowdSec and WAF integration

2025-11-26 18:35:14 +00:00
parent 06d0aca8a4
commit c8a452f1a0
14 changed files with 526 additions and 5 deletions
--- a/docker-compose.local.yml
+++ b/docker-compose.local.yml
@@ -24,6 +24,13 @@ services:
      - CPM_IMPORT_CADDYFILE=/import/Caddyfile
      - CPM_IMPORT_DIR=/app/data/imports
      - CPM_ACME_STAGING=false
+      # Security Services (Optional)
+      - CPM_SECURITY_CROWDSEC_MODE=disabled
+      - CPM_SECURITY_CROWDSEC_API_URL=
+      - CPM_SECURITY_CROWDSEC_API_KEY=
+      - CPM_SECURITY_WAF_MODE=disabled
+      - CPM_SECURITY_RATELIMIT_ENABLED=false
+      - CPM_SECURITY_ACL_ENABLED=false
    extra_hosts:
      - "host.docker.internal:host-gateway"
    cap_add: