Crowdsec setup

[asychev]

Hi!

Couple of notes about crowdsec configuration by installer:

1. Latest crowdsec-bouncer-traefik-plugin is v1.4.1 (installer uses v1.3.5)
2. This does not make sense as Response header, it is a Request header to indicate downstream service that https is used by client:

    security-headers:
      headers:
        customResponseHeaders: 
          X-Forwarded-Proto: "https"  # Set forwarded proto to https

Hope it helps ;)

[v1rusnl]

Hi!

Couple of notes about crowdsec configuration by installer:

1. Latest crowdsec-bouncer-traefik-plugin is v1.4.1 (installer uses v1.3.5)
2. This does not make sense as Response header, it is a Request header to indicate downstream service that https is used by client:

    security-headers:
      headers:
        customResponseHeaders: 
          X-Forwarded-Proto: "https"  # Set forwarded proto to https

Hope it helps ;)

Perhaps it has something to do with this change since 1.4.x?

/!\ Appsec maximum body limit is defaulted to 10MB By careful when you upgrade to >1.4.x

Perhaps @miloschwartz or @oschwartz10612 can elaborate on this?

[TuncTaylan]

I don't think that it has something to do with the plugin update > v1.4.x.
I don't understand either, why it shouldn't make any sense, it seems the default setting there:

sslProxyHeaders
The sslProxyHeaders option is set of header keys with associated values that would indicate a valid HTTPS request. It can be useful when using other proxies (example: "X-Forwarded-Proto": "https").