middlewares:
  crowdsec-bouncer:
      forwardauth:
        address: http://bouncer-traefik:8080/api/v1/forwardAuth
        trustForwardHeader: true

  dashboard-auth:
    basicAuth:
      users:
        - "admin:$apr1$..."  # htpasswd generated
  internal-only:
    ipAllowList:
      sourceRange:
        - "192.168.0.0/24"  # your LAN
        - "127.0.0.1/32"