get cloudflared client real ip and fix crowdsec mw

2025-11-29 17:24:51 +01:00
parent 72628f0f0e
commit f7bfe2f71d
6 changed files with 33 additions and 26 deletions
--- a/ansible/arcodange/factory/playbooks/01_system.yml
+++ b/ansible/arcodange/factory/playbooks/01_system.yml
@@ -291,6 +291,9 @@
                traefik:
                  expose:
                    default: true
+                web:
+                  forwardedHeaders:
+                    trustedIPs: ["10.42.0.0/16"] #default k3s cidr
              ingressRoute:
                dashboard:
                  enabled: true
@@ -343,7 +346,7 @@
              additionalArguments:
                - '--providers.file.filename=/config/dynamic.yaml'
                - '--providers.kubernetesingress.ingressendpoint.publishedservice=kube-system/traefik'
-                - "--providers.kubernetescrd"
+                - "--providers.kubernetescrd.allowcrossnamespace=true"
              certificatesResolvers:
                letsencrypt:
                  acme: