Switch to Edge Script + Bunny Database architecture for unlimited IP blocking

Replace Shield Access List (5,000 IP limit) with Bunny Database (libSQL) +
Edge Script middleware to support CAPI community blocklists (tens of thousands
of IPs). Bouncer now uses CrowdSec streaming API for incremental sync with
periodic full resync every 6 hours.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
kappa
2026-02-13 09:25:43 +09:00
parent d1b870227e
commit da199bce8c
5 changed files with 357 additions and 102 deletions

View File

@@ -2,12 +2,16 @@
CROWDSEC_LAPI_URL=http://crowdsec:8080
CROWDSEC_LAPI_KEY=your_bouncer_api_key_here
# Bunny CDN Shield API
BUNNY_API_KEY=your_bunny_api_key_here
BUNNY_SHIELD_ZONE_ID=12345
BUNNY_ACCESS_LIST_ID=12345
# Bunny Database (libSQL)
BUNNY_DB_URL=https://your-database-id.lite.bunnydb.net
BUNNY_DB_TOKEN=your_database_access_token_here
# Optional settings
SYNC_INTERVAL=60
MAX_IPS=1000
INCLUDE_CAPI=true
FULL_RESYNC_INTERVAL=21600
LOG_LEVEL=INFO
# For setup.py only (Edge Script deployment)
BUNNY_API_KEY=your_bunny_api_key_here
BUNNY_SCRIPT_ID=your_edge_script_id_here