Commit Graph

3 Commits

Author SHA1 Message Date
ImpulsiveFPS 2613b3471c Fix: Disable CrowdSec bouncer by default to resolve image pull error
The crowdsecurity/traefik-bouncer image was causing deployment failures.
Commented out the bouncer container and middleware references - CrowdSec
will still detect and log threats, but automatic blocking is disabled
until the bouncer is properly configured with an API key.

To enable later:
1. docker exec crowdsec cscli bouncers add traefik-bouncer
2. Add CROWDSEC_API_KEY env var
3. Uncomment bouncer container and middleware
2026-02-03 12:23:05 +01:00
ImpulsiveFPS fa8bde3940 Fix: Rename stack.env to stack.env.example to prevent Portainer auto-load error
Portainer was trying to auto-load stack.env as an env file which caused
parsing errors. Renamed to stack.env.example so users manually copy
the values into Portainer UI instead.

Also updated .env.example with cleaner format.
2026-02-03 12:20:23 +01:00
ImpulsiveFPS d0a2273b71 Initial LemonSec deployment
Features:
- Traefik reverse proxy with automatic SSL (Let's Encrypt)
- Authelia SSO and 2FA authentication
- CrowdSec intrusion detection/prevention
- AdGuard Home DNS
- TrueNAS Nextcloud routing configured
- Portainer Git Repository deployment ready

Security:
- Cloudflare integration with strict SSL
- Rate limiting and security headers
- Network segmentation (external/internal)
- Automatic threat blocking
2026-02-03 12:09:13 +01:00