kaffa/obsidian
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add netbis DR server docs and update related infra docs

Browse Source 
- services/netbis.md: sandbox-tokyo APISIX 예비서버, Netbis CF 계정, 라우트/SSL/CrowdSec 연동 전체 문서화
- infra-hosts.md: sandbox-tokyo 역할 업데이트 (netbis 예비 APISIX Gateway)
- crowdsec-safeline.md: netbis-cf 바운서 (별도 컨테이너) 항목 추가
This commit is contained in:
kappa
2026-04-03 10:50:38 +09:00
parent 44c8081dda
commit e8cac186c5
3 changed files with 150 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
infra/crowdsec-safeline.md
View File

@@ -1,6 +1,6 @@
---
title: CrowdSec 및 SafeLine WAF
updated: 2026-03-28
updated: 2026-04-03
---
## CrowdSec LAPI
@@ -105,6 +105,21 @@ cat updated-config.yaml | ssh incus-jp1 "incus file push - cs-cf-worker-bouncer/
ssh incus-jp1 "incus exec cs-cf-worker-bouncer -- systemctl restart crowdsec-cloudflare-worker-bouncer"
```
### netbis-cf (Cloudflare Worker — Netbis 계정)
Kappa 계정용 `cs-cf-worker-bouncer`와 별도 컨테이너로 분리 운영. 상세: [[netbis]]
| 항목 | 값 |
|------|-----|
| 위치 | jp1 Incus `netbis-cf-bouncer` 컨테이너 (10.253.103.33) |
| 바운서 이름 | netbis-cf |
| 설정 | `/etc/crowdsec/bouncers/crowdsec-cloudflare-worker-bouncer.yaml` |
| 동기화 | 10초 |
| CF 계정 | Netbis (netbis@netbis.io, Account ID 8fcf3c7876332aba33e974cbbfdad951) |
| 보호 zone | fall-vip.com, fall-mvp.com, fall-vip7.com, psd777.com, rss-555.com, rss-7790.com |
| Turnstile | 6개 zone managed 모드, 168시간 secret key 로테이션 |
| 로그 소스 | sandbox-tokyo APISIX → CrowdSec http-logger (8085/apisix-logs) |
### bunny-cdn-bouncer (BunnyCDN Edge Script)
| 항목 | 값 |