Custom Build Request: CrowdSec Bouncer, Rate Limit, Caddy Security, Docker Proxy, GeoIP Filter

serfriz / caddy-custom-builds

Caddy Docker custom images built with different combinations of modules. All images are updated automatically when a new version of Caddy is released.

GNU General Public License v3.0

67 stars 10 forks source link

Custom Build Request: CrowdSec Bouncer, Rate Limit, Caddy Security, Docker Proxy, GeoIP Filter #26

Closed neocharles closed 1 month ago

neocharles commented 1 month ago

Which Caddy modules do you need to be included? Please, list them with their GitHub links. I would like a Caddy build with the following modules:

CrowdSec Bouncer: https://github.com/hslatman/caddy-crowdsec-bouncer
Rate Limit: https://github.com/mholt/caddy-ratelimit
Caddy Security: https://github.com/greenpau/caddy-security
Docker Proxy: https://github.com/lucaslorentz/caddy-docker-proxy
GeoIP Filter: https://github.com/porech/caddy-maxmind-geolocation

Additional context Just looking for a custom build with CrowdSec Bouncer, Rate Limit, Caddy Security, Docker Proxy, GeoIP Filter

serfriz commented 1 month ago

Done! It will take about an hour to build, let me know if you have any issues!

neocharles commented 1 month ago

@serfriz By any chance would you support https://github.com/caddy-dns/namecheap as well, to be able to use the DNS-01 Challenge instead of having to open access to port 80/443 on the server?

From the looks of it, I am able to create an API key on namecheap for the domain in question.

serfriz commented 1 month ago

Sure, do you want it added to the build I pushed yesterday? Btw, I personally recommend using Cloudflare (free, with integrated DDoS and bot protection, and GeoIP blocking rules) so you are not tied to the domain registrar (paid) for DNS routing. It's easy to do by pointing the nameservers in Namecheap's control panel to the Cloudflare ones.

neocharles commented 1 month ago

In that case, I can give caddy-cloudflare-ddns-crowdsec-geoip-security a shot and see if it works out well for me first.

I've since discovered the docker integration won't work as I expected with them being on different VMs on my network so I will be adding them manually regardless. Sounds like Cloudflare can probably handle rate limiting sufficiently.

However, I am getting an authentication error on ghcr.io/serfriz/caddy-cloudflare-ddns-crowdsec-geoip-security:latest when trying to pull the image with docker compose; I am able to get it from docker hub though

Would you be able to confirm that the security modules are included? I seem to be getting errors starting the container each time I try to configure anything which would take advantage of that module, such as auth portal and jwt.