added bouncer

caddy/Caddyfile

@@ -1,13 +1,23 @@
-{$CADDY_BASE_HOST} {
-	encode zstd gzip
-  reverse_proxy http://frontend:3000
-  handle_path /api/* {
-    reverse_proxy http://backend:3000
+{
+  crowdsec {
+      api_url {$CROWDSEC_API_URL}
+      api_key {$CROWDSEC_API_KEY}
   }
-  handle_path /profileImages/* {
-    rewrite * /sorvor{path}
-    reverse_proxy http://minio:9000
+}
 
+{$CADDY_BASE_HOST} {
+  route {
+    crowdsec
+    encode zstd gzip
+    reverse_proxy http://frontend:3000
+    handle_path /api/* {
+      reverse_proxy http://backend:3000
+    }
+    handle_path /profileImages/* {
+      rewrite * /sorvor{path}
+      reverse_proxy http://minio:9000
+
+    }
   }
   log {
     output file /var/log/caddy/access.log

caddy/Dockerfile

@@ -0,0 +1,14 @@
+ARG CADDY_VERSION=2
+
+FROM caddy:${CADDY_VERSION}-builder-alpine AS builder
+
+RUN xcaddy build \
+    --with github.com/mholt/caddy-l4 \
+    --with github.com/hslatman/caddy-crowdsec-bouncer/http@main \
+    --with github.com/hslatman/caddy-crowdsec-bouncer/layer4@main
+
+FROM caddy:${CADDY_VERSION} AS caddy
+
+WORKDIR /
+
+COPY --from=builder /usr/bin/caddy /usr/bin/caddy