mysticalsoap/docker
Watch
1
0
Fork
You've already forked docker
 0
Code Issues 38 Pull requests 18 Wiki Activity Actions

VPS: CrowdSec agent + firewall bouncer #102

New issue
Open
opened 2026-08-17 15:07:09 -04:00 by mysticalsoap · 0 comments
mysticalsoap commented 2026-08-17 15:07:09 -04:00
Owner
Copy link
  • Bouncer to enforce decisions coming from the homelab
  • Agent watching the SSH port

Folding the bouncer into Podman is fine for packaging uniformity, but it needs --network=host plus NET_ADMIN/NET_RAW to write host nftables -- so it keeps the packaging benefit and none of the isolation one.

- Bouncer to enforce decisions coming from the homelab - Agent watching the SSH port Folding the bouncer into Podman is fine for packaging uniformity, but it needs `--network=host` plus NET_ADMIN/NET_RAW to write host nftables -- so it keeps the packaging benefit and none of the isolation one.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
trunk
renovate/xenrox-ntfy-alertmanager-1.x
renovate/ghcr.io-new-usemame-calibre-web-nextgen-4.x
renovate/ghcr.io-hotio-sonarr-release-4.0.19.2979
renovate/ghcr.io-hotio-radarr-release-6.3.0.10514
renovate/ghcr.io-hotio-qbittorrent-release-5.2.3
renovate/ghcr.io-hotio-prowlarr-release-2.5.2.5491
renovate/ghcr.io-hotio-lidarr-release-3.1.0.4875
renovate/ghcr.io-dagucloud-dagu-latest
renovate/ghcr.io-hotio-bazarr-release-1.6.0
fix/boot-crowdsec-health
renovate/python-3.14-slim
renovate/ghcr.io-mealie-recipes-mealie-3.x
renovate/gunicorn-26.x
renovate/vaultwarden-server-1.x
renovate/ghcr.io-lycheeorg-lychee-7.x
renovate/ghcr.io-amruthpillai-reactive-resume-5.x
renovate/gtstef-filebrowser-2-beta-slim
fix/public-tracker-sweep
renovate/fatedier-frpc-0.x
No results found.
Labels
Clear labels   
audit-work
Security enhancements coming out of an audit of the stack

  
bug
Something is broken

  
docs
Wiki, in-repo docs, comments

  
general-admin
Learning, refinement, and housekeeping

  
major-upgrade
Major-version bump, review carefully

  
needs-vps-sync

   
new-service
Adding a new service to the stack

  
on-hold
Deliberately parked, not ready to start

  
outside-work
Not part of the stack itself, tracked here anyway

  
post-podman
Suited to after the Podman migration

  
renovate
Opened by renovate-bot

  
upstream
Needs an issue or PR on someone else's project

  
vps
Work on the VPS rather than the homelab

No labels
audit-work
bug
docs
general-admin
major-upgrade
needs-vps-sync
new-service
on-hold
outside-work
post-podman
renovate
upstream
vps
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
mysticalsoap/docker#102
No description provided.