Add Grafana & Integrate CrowdSec bouncer into Traefik

Author: geekau

Import Bookmarks - MediaStackGuide Applications (External URLs).html

@@ -10,13 +10,11 @@ <H1>Bookmarks</H1>
             <DT><A HREF="https://github.com/geekau/mediastack/">GitHub | MediaStack Project Repo</A>
             <DT><A HREF="https://mediastack.guide/">MediaStack.Guide</A>
             <DT><A HREF="https://dash.cloudflare.com/">Cloudflare | Domain / DNS Management</A>
-
+            <DT><A HREF="https://app.crowdsec.net/security-engines/">CrowdSec Portal | Security Engines</A>
+            <DT><A HREF="https://grafana.YOUR_DOMAIN_NAME/">Grafana | Monitoring Dashboard</A>
             <DT><A HREF="https://auth.YOUR_DOMAIN_NAME/">Authentik | Authentication & Authorisation Manager</A>
             <DT><A HREF="https://headplane.YOUR_DOMAIN_NAME/admin/">Headplane | Headscale & Tailscale Manager</A>
-            <DT><A HREF="https://dashboard.YOUR_DOMAIN_NAME/">Dashboard: CrowdSec | Cyber Threat Intelligence Manager</A>
             <DT><A HREF="https://traefik.YOUR_DOMAIN_NAME/dashboard/">Traefik Proxy | Cloud Native Application Proxy</A>
-
-
             <DT><A HREF="https://portainer.YOUR_DOMAIN_NAME/">Portainer | Docker Manager</A>
             <DT><A HREF="https://jellyfin.YOUR_DOMAIN_NAME/">Jellyfin | Media Player</A>
             <DT><A HREF="https://plex.YOUR_DOMAIN_NAME/">Plex | Media Player</A>

Import Bookmarks - MediaStackGuide Applications (Internal URLs).html

@@ -9,14 +9,12 @@ <H1>Bookmarks</H1>
         <DL><p>
             <DT><A HREF="https://github.com/geekau/mediastack/">GitHub | MediaStack Project Repo</A>
             <DT><A HREF="https://mediastack.guide/">MediaStack.Guide</A>
-            <DT><A HREF="https://dash.cloudflare.com/">Cloudflare | Domain / DNS Management</A>    
-
+            <DT><A HREF="https://dash.cloudflare.com/">Cloudflare | Domain / DNS Management</A>
+            <DT><A HREF="https://app.crowdsec.net/security-engines/">CrowdSec Portal | Security Engines</A>
+            <DT><A HREF="http://localhost:3200/">Grafana | Monitoring Dashboard</A>
             <DT><A HREF="http://localhost:6080/">Authentik | Authentication & Authorisation Manager</A>
             <DT><A HREF="http://localhost:3500/admin/">Headplane | Headscale & Tailscale Manager</A>
-            <DT><A HREF="http://localhost:8600/">Dashboard: CrowdSec | Cyber Threat Intelligence Manager</A>
             <DT><A HREF="http://localhost:8080/dashboard/">Traefik Proxy | Cloud Native Application Proxy</A>
-        
-
             <DT><A HREF="http://localhost:9000/">Portainer | Docker Manager</A>
             <DT><A HREF="http://localhost:8096/">Jellyfin | Media Player</A>
             <DT><A HREF="http://localhost:32400/">Plex | Media Player</A>

testing-traefik/.env

@@ -91,9 +91,9 @@ TDARR_SERVER_PORT=8266
 # WebUI ports for internal access to applications
 WEBUI_PORT_AUTHENTIK=6080
 WEBUI_PORT_BAZARR=6767
-WEBUI_PORT_DASHBOARD=8600
 WEBUI_PORT_DDNS_UPDATER=8310
 WEBUI_PORT_FILEBOT=5454
+WEBUI_PORT_GRAFANA=3800
 WEBUI_PORT_HEADPLANE=3500
 WEBUI_PORT_HEIMDALL=2080
 WEBUI_PORT_HOMARR=3200

testing-traefik/README.md

@@ -204,22 +204,24 @@ Create a Crowdsec account, and obtain your Crowdsec security engine enrolement k
 
 ``` bash
 sudo docker exec crowdsec cscli console enroll cm1yipaufk0021g1u01fq27s3
-sudo docker exec crowdsec cscli collections install crowdsecurity/base-http-scenarios crowdsecurity/http-cve crowdsecurity/linux crowdsecurity/sshd crowdsecurity/traefik
-sudo docker exec crowdsec cscli parsers install crowdsecurity/traefik-logs crowdsecurity/docker-logs
+sudo docker exec crowdsec cscli collections install crowdsecurity/base-http-scenarios crowdsecurity/http-cve crowdsecurity/linux crowdsecurity/iptables crowdsecurity/sshd crowdsecurity/traefik
+sudo docker exec crowdsec cscli parsers install crowdsecurity/syslog-logs crowdsecurity/iptables-logs crowdsecurity/sshd-logs crowdsecurity/traefik-logs
 sudo docker exec crowdsec cscli console enable console_management
-sudo docker exec crowdsec cscli bouncers add crowdsecBouncer
+sudo docker exec crowdsec cscli bouncers add traefik-bouncer
 ```
 
 Crowdsec will output the API Key for the bouncer:  
 
 ``` bash
-API key for 'crowdsecBouncer':
+API key for 'traefik-bouncer':
 
    8andilX0JKYIu8z+R4imPkIgG+TMdCttAuMaHrsV7ZU
 
 Please keep this key since you will not be able to retrieve it!
 ```
 
+You must go back to [https://app.crowdsec.net/security-engines](https://app.crowdsec.net/security-engines) and approve registration of the new CrowdSec docker engine into the online portal.  
+
 Check the status of Crowdsec components:  
 
 ``` bash
@@ -270,7 +272,7 @@ Crowdsec will display the following output:
 -----------------------------------------------------------------------------
  Name             IP Address  Valid  Last API pull  Type  Version  Auth Type 
 -----------------------------------------------------------------------------
- crowdsecBouncer              ✔️                                   api-key   
+ traefik-bouncer              ✔️                                   api-key   
 -----------------------------------------------------------------------------
 ```
 
@@ -298,7 +300,7 @@ Create Authentik Application:
     Name: Provider for Authentik  
     Authorization flow: default-provider-authorization-explicit-consent (Authorize Application)  
     Select "Forward auth (domain level)"  
-    Authentication URL: https://auth.example.com    <-- change to your domain  
+    Authentication URL: <https://auth.example.com>    <-- change to your domain  
     Cookie domain: example.com                      <-- change to your domain  
     Advanced flow settings:  
     Authentication flow: default-authentication-flow (Welcome to authentik!)  
@@ -313,7 +315,7 @@ Add application to outposts:
     Update Outpost:  
     Select "Authentik" application in "Available Applications" and move across to "Selected Applications"  
     Advanced settings:  
-        Under "Configuration", ensure authentik_host is http://authentik:6080  
+        Under "Configuration", ensure authentik_host is <http://authentik:6080>  
     Select "Update"  
 
 Edit `docker-compose.yaml` and make the following adjustments: