admin/Bruchtal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(tunnel): allgemeines Setup

Browse Source
This commit is contained in:
admin
2026-02-20 22:49:00 +01:00
parent 32af25f0a3
commit 611f540a39
1 changed files with 0 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files

70
docs/network/tunnel.md
View File

@@ -2,74 +2,4 @@
#Sicherheits-Setup #Sicherheits-Setup
# Sicherheits-Setup
- Stand 3.1.26: Crowsec bislang noch ohne ban
<pre>
+------------------+
| Internet |
+--------+---------+
|
| TCP 80 / 443
v
+------------------------------------------------------------------+
| Hetzner Server |
| seanluc1 |
| |
| +------------+ shared docker network +---------------+ |
| | Traefik | <--------------------------> | CrowdSec | |
| | v3.4.1 | | LAPI | |
| | | | | |
| | :80 :443 | | Decisions | |
| | :8080 | | (CAPI) | |
| +------+-----+ +---------------+ |
| | |
| | dynamic config (file provider) |
| v |
| +-----------------------------------------------------------+ |
| | Pangolin | |
| | v1.14.1 | |
| | | |
| | Web UI :3002 | |
| | API :3000 | |
| | Internal API :3001 | |
| | | |
| | - generates Traefik routers | |
| | - manages resources | |
| | - controls Gerbil / Newt | |
| +-----------+-----------------------------------------------+ |
| | |
| | WireGuard control |
| v |
| +-----------------------------------------------------------+ |
| | Gerbil | |
| | | |
| | WireGuard Exit Node | |
| | wg0: 100.89.128.1/24 | |
| | Control API :3003 | |
| | | |
| | - terminates tunnel | |
| | - forwards TCP ports | |
| +-----------+-----------------------------------------------+ |
| | |
+---------------|--------------------------------------------------+
|
| WireGuard tunnel (encrypted)
v
+------------------------------------------------------------------+
| Local Network (LAN) |
| |
| +-------------+ +------------------------------------+ |
| | Newt | | Target Services | |
| | | | | |
| | wg IP | | Home Assistant | |
| | 100.89.128.4| | 192.168.178.203:8123 | |
| | | | | |
| | TCP Proxy | | Wiki / Bitwarden | |
| +-------------+ +------------------------------------+ |
| |
+------------------------------------------------------------------+
</pre>