secubox-openwrt/package/secubox/secubox-app-crowdsec-custom/files/parsers/s02-enrich/secubox-whitelist.yaml
CyberMind-FR 3e52444a73 feat(crowdsec): Add custom CrowdSec scenarios package for SecuBox
- Add secubox-app-crowdsec-custom package with:
  - HTTP auth bruteforce detection
  - Path scanning detection
  - LuCI/uhttpd auth monitoring
  - Trusted IP whitelist for private networks
- Fix Lyrion Docker image path to ghcr.io/lms-community/lyrionmusicserver:stable

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-22 14:50:36 +01:00

19 lines
467 B
YAML

# CrowdSec whitelist for SecuBox trusted networks
# Prevents banning of internal/trusted IPs
name: crowdsecurity/secubox-whitelist
description: "Whitelist trusted IPs for SecuBox admin access"
whitelist:
reason: "SecuBox trusted network"
ip:
# Localhost
- "127.0.0.1"
- "::1"
cidr:
# Private networks (RFC1918)
- "192.168.0.0/16"
- "172.16.0.0/12"
- "10.0.0.0/8"
# Add custom admin IPs here if needed
# - "YOUR_ADMIN_IP/32"