- Add secubox-app-crowdsec-custom package with: - HTTP auth bruteforce detection - Path scanning detection - LuCI/uhttpd auth monitoring - Trusted IP whitelist for private networks - Fix Lyrion Docker image path to ghcr.io/lms-community/lyrionmusicserver:stable Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
19 lines
467 B
YAML
19 lines
467 B
YAML
# CrowdSec whitelist for SecuBox trusted networks
|
|
# Prevents banning of internal/trusted IPs
|
|
|
|
name: crowdsecurity/secubox-whitelist
|
|
description: "Whitelist trusted IPs for SecuBox admin access"
|
|
whitelist:
|
|
reason: "SecuBox trusted network"
|
|
ip:
|
|
# Localhost
|
|
- "127.0.0.1"
|
|
- "::1"
|
|
cidr:
|
|
# Private networks (RFC1918)
|
|
- "192.168.0.0/16"
|
|
- "172.16.0.0/12"
|
|
- "10.0.0.0/8"
|
|
# Add custom admin IPs here if needed
|
|
# - "YOUR_ADMIN_IP/32"
|