diff --git a/Proxy_Containers/traefik/README.md b/Proxy_Containers/traefik/README.md index 81fbf41..78911e3 100644 --- a/Proxy_Containers/traefik/README.md +++ b/Proxy_Containers/traefik/README.md @@ -21,16 +21,17 @@ Running container of [crowdsec](https://scripts.gabesville.com/Gabesville/Docker ### Verifying: 1. Confirm CrowdSec Is Parsing Traefik Logs: `docker exec crowdsec cscli metrics` -2. docker logs traefik 2>&1 | grep -i "crowdsec\|plugin\|error" | tail -20 -3. docker exec crowdsec cscli bouncers list -4. docker logs traefik 2>&1 | tail -30 -5. docker exec crowdsec cscli metrics | grep -A8 "Local API Metrics" +2. `docker logs traefik 2>&1 | grep -i "crowdsec\|plugin\|error" | tail -20` +3. `docker exec crowdsec cscli bouncers list` +4. `docker logs traefik 2>&1 | tail -30` +5. `docker exec crowdsec cscli metrics | grep -A8 "Local API Metrics"` You should see /v1/decisions/stream hits incrementing. If that's clean, the stack is fully operational. ### Testing: Test CrowdSec Is Actually Blocking \ Ban your own IP: `docker exec crowdsec cscli decisions add --ip ` \ +`docker exec crowdsec cscli decisions list` Go to one of URLs \ Note: using crowdsecMode: stream, decisions sync every 60 seconds — so the ban may take up to a minute to take effect \ Unban yourself: `docker exec crowdsec cscli decisions delete --ip ` \ No newline at end of file