From 92f3922bc2386266a3a9072f22539456b5076ad9 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Fri, 29 Sep 2023 00:10:18 +0200
Subject: [PATCH] fix(nginx): Use crowdsec service directly

---
 .../k8s01/nginx-system/release-override.yaml  | 68 ++++++++++++++++++-
 1 file changed, 65 insertions(+), 3 deletions(-)

diff --git a/clusters/k8s01/nginx-system/release-override.yaml b/clusters/k8s01/nginx-system/release-override.yaml
index 5aaf7a25b..248786c8f 100644
--- a/clusters/k8s01/nginx-system/release-override.yaml
+++ b/clusters/k8s01/nginx-system/release-override.yaml
@@ -5,15 +5,77 @@ metadata:
     namespace: nginx-system
 type: Opaque
 stringData:
-    values-overrides.yaml: ENC[AES256_GCM,data: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,iv:tM1K3E5fj8eClJoBKnZqR2oFjr+NR+v5JL8s7T0gUio=,tag:M5ojN8gIC8UhF04nXEsA6w==,type:str]
+    values-overrides.yaml: ENC[AES256_GCM,data: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,iv:JRQfFSwcmKk5W6MobmVhsWQgQal8BzoYy1oWJ/Xfk60=,tag:yR2oPx+ZCFHhAwZDDE3cOg==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-09-28T21:57:52Z"
-    mac: ENC[AES256_GCM,data:9SzFRLivaRuxAdRT/XAAtfGDILGUbM0i+sglwFSvUqiJgTsO04Vf8xLvxVd5YAHec6BmQGe4onxClKPPRcDwgAN2z1a9t896e17iUER1Sm//ALv17JZwqImcWZ/p6zHgcG5g1ShU+BwS8hQpWFQdeLlJtKZU5cx0bAQW2T2i8IA=,iv:53Xxj6NWAQQpLX8RmfnMiGBJBxaHVpAlUJFHm2U/siA=,tag:0oOYuX8NH8w3fZsRHb+aJw==,type:str]
+    lastmodified: "2023-09-28T22:10:10Z"
+    mac: ENC[AES256_GCM,data:dK5nnsS2l1nAPMmHIPz6kNgkT46yU6ja/Tq2vE9roS+Fz5eV1eJjOJZFPdpIYtOvzEKd6qpfm8lMObZ72MpdcCZWN73UhhnDwJzu5FVj4TxwtVmuy4zX5ipR+rwHXwHtzMP02p/SzZdMBIEX6KpSqy4eM1ZX2q7kI6BDLkgN784=,iv:g2kWs99CcIQpFlu+aOb4+jdErsM40KeOIrS0LiaLrsw=,tag:/EbHsPcmbH5/xnyJ7e5Gqg==,type:str]
+    pgp:
+        - created_at: "2022-02-09T22:43:33Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAADWlCAiz3CyI6JANxoCD7FSqqxyGAW+wBxCnN2Pd9y+bf
+            M+qjxnqOBa5SEXtn/Q9TafS3Du1+AnES0T+MVtw6x/cP8jD89ZSisJLlE94bBwrV
+            JPkv6JV3nOoi80dgMNeQOd8tzfdFZO25P24Nzf4cnHJz9x4vQFndFSgS1Zz6Jlyx
+            +ErYR6C/DGEgmFehbvdZRIZwPIcQaC4TokMW9oRP+9zZghtT1lRX5p6M4GdcmzAy
+            PcrQatZ3oNYbfoaDkvXivtWoBwm4t4bGW5j9lgASjsqBcd8lDsxArFQBiR+NcJRz
+            i9an0Uz0ArB6fUn/XFfLtOWtmXMtnKhJ4gnJK3Vu5LQfzS5UHTPJDZRQLtX8kRXG
+            6E/s20HnVi1srjls3mxGUJZ9jIL4OVwSyXOu3QRferHOu/RCKK7nm+UOkMPsXoDK
+            PGIbdAZx/lbKoZS+8zld7UFih+NcgGdLMhZrE+QXU7QAtdHf4UZ4a03fn8XwrX76
+            UIvIG7YKS47c4I3QDUAQIbvH9HTyvQX9CS6jttktbIHfcUHgtaOsS9QRb1vhuhZi
+            /6vkc3uWDV9+Z1yO6DbGj5E4y8erweI5w2vAq8EYMhPdna6h2AYdsWd4gmfan+81
+            lOEnZGKzNntTNFFusDVLMKMdLRWD4/vaZe56ACeJ39tRdD+koavbLEsikHq6spnS
+            5gEioKhhxI4jHeEI5dGDtXQg8k2agqvVwK0RfvAnkN3kjZYmZ/rfVMrv0TTQqdO4
+            EPAO25j1U7BlLB92z1CUtiDkaB1wMCJ7fHFjMMf5sftfy+IktvWWAA==
+            =PpW2
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-02-09T22:43:33Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4oYbIHZIrAPAQ//SZ6MB3LR3Zlp5pvWFVBdT9+ReRK5zPpeVXEslslVmOu6
+            eYlETdYSxdeqrb1Swkq+m3snm1e9c55pp077xCY5rsex0t4yDCXD1EnlGjLDER4c
+            okNMx30Hrs4EZEkXpXq5oE6p9nBckZdwQ3n7Bm3OsecmsXxvV6xH6bV8amzDsJjI
+            5lFWIuw9AIlWosiJdnn/VH9+7PWZYIQwSBS7lyf8+IB2sHS2+ejaVRFxeta3kk0t
+            ZWk2+CA80A8kgp9RoGZNjWOwBRBMdS7oh+t/e4g0LAF1vm3cYoGRe1wMYkT0BjtH
+            j8NqdsyJK1ingSUzDDvjVlJcvdit6Ll/9beoCh7+Zcu0poQ9UNO28f+AGXpJgADS
+            i414dwdUi1ZGzsM2mIiOAPkVezXXzqk8fyA+m/VaIvHl0qGgrCQU93a1mFbfy/P/
+            rV1pHjphUu0WUsVTr9e3Y+K/44872DWOnM6Ek3yiYUlk8sNlrLcDXF6IaRhmpojH
+            VPwjOFXlTH0yrJlATmSpzZvkBduDFq6Bx6s9SgfZiKF6fMopUx11YPoOdjqQ6cua
+            YqOPEEQXVudpNOojDZSMjjwP2qFf0vU25vVyz+AYXusJZmc+MIGqvYE8rfMRxt+0
+            F1Lf3A6N39av1robgpscH1H1Q/A/jcuzwNGWZkt1+mrFkJW7FyvEXdOPx8up4oLU
+            aAEJAhBz50wHUC7M3/U9NG3/DCCC7JayMD8bMq4bLUh1MDVlgjqUxZX4wmG/6SgC
+            PDfEI1l5w/yMS1A6CVxeKtr9OL4HQH8a44+i5HmR8SNYuYquXNwRN7aS+w79Im16
+            y76455qoZQMF
+            =ho5d
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang|externalURL|.*-secret|.*-url|.*Secret|.*-domain|password|subjects|node|apiURL)$
+    version: 3.7.3
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: crowdsec-bouncer
+    namespace: nginx-system
+type: Opaque
+stringData:
+    #ENC[AES256_GCM,data:EMvPIQM3szvrtW80uG8UdH7IExCZEa/fZsgA9jJurrP9nE4HgHX7LH5B7ookDvMkaPfznYQ=,iv:N2GNif7mw9JLSYIB+BxsX8mTq502KF6sFK9qUOkM0G0=,tag:jhRJFEm/Exu7SAKZJv9ftg==,type:comment]
+    apiKey: ENC[AES256_GCM,data:iaYBcZGj17EFxDtFV7VJz1PSwYv+R84S/XjM9jGqjBc=,iv:7WlfiShpYmlwJzx3/fl0kFEEDQQSUdi3bYzuBr8H3GY=,tag:FWbQZsG6cJ+xSRtOB/d7dA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-09-28T22:10:10Z"
+    mac: ENC[AES256_GCM,data:dK5nnsS2l1nAPMmHIPz6kNgkT46yU6ja/Tq2vE9roS+Fz5eV1eJjOJZFPdpIYtOvzEKd6qpfm8lMObZ72MpdcCZWN73UhhnDwJzu5FVj4TxwtVmuy4zX5ipR+rwHXwHtzMP02p/SzZdMBIEX6KpSqy4eM1ZX2q7kI6BDLkgN784=,iv:g2kWs99CcIQpFlu+aOb4+jdErsM40KeOIrS0LiaLrsw=,tag:/EbHsPcmbH5/xnyJ7e5Gqg==,type:str]
     pgp:
         - created_at: "2022-02-09T22:43:33Z"
           enc: |-
-- 
GitLab