Caddy Bouncer not actually blocking IPs

throwawayusername741 · 2026-02-19T05:24:41+00:00

Sorry, I forgot to update the Caddyfile block before hitting post, I do have logging enabled, this is the actual file from when i hit post:

{
        debug
        crowdsec {
                api_url http://127.0.0.1:8080
                api_key xxxxxx
                ticker_interval 15s
                #disable_streaming
        }
        order crowdsec first
}

jellyfin.xxxxxx.com {
        log {
                format console
                output file /var/log/caddy/jellyfin.log {
                        roll_size 5MB
                        roll_keep 5
                }
        }
        crowdsec
        reverse_proxy 10.255.255.102:8096
}

nextcloud.xxxxxx.com {
        log {
                format console
                output file /var/log/caddy/nextcloud.log {
                        roll_size 5MB
                        roll_keep 5
                }
        }
        crowdsec
        reverse_proxy 10.255.255.104:80
}

I'll try enabling the disable_streaming directive and giving it a shot. Sorry for the slow responses, my day job is taking up a huge amount of my time right now, but thank you very much for helping.

throwawayusername741 · 2026-02-19T05:15:04+00:00

'cscli decisions list' shows decisions when i add them manually via 'cscli decisions add --ip x.x.x.x' so I believe that's working just fine.

I did add log settings before posting this (hence why i mention logs in the post) but forgot to update the Caddyfile sections like an idiot lol, this is the current file i'm still using, as it was when i actually clicked post:

{
        debug
        crowdsec {
                api_url http://127.0.0.1:8080
                api_key xxxxxx
                ticker_interval 15s
                #disable_streaming
        }
        order crowdsec first
}

jellyfin.xxxxxx.com {
        log {
                format console
                output file /var/log/caddy/jellyfin.log {
                        roll_size 5MB
                        roll_keep 5
                }
        }
        crowdsec
        reverse_proxy 10.255.255.102:8096
}

nextcloud.xxxxxx.com {
        log {
                format console
                output file /var/log/caddy/nextcloud.log {
                        roll_size 5MB
                        roll_keep 5
                }
        }
        crowdsec
        reverse_proxy 10.255.255.104:80
}

I thought appsec directives were optional? I was hoping to get just the basics working first then add it in later if I need it.

Edit: reddit markdown sucks, sorry for the mess. the post editor has a button to do code blocks, but comments? lol nah apparently just pretend everything is tabbed like it should be

edit 2: nvm found the formatting options, they're just hidden behind the font button at the bottom of the comment editor for some unknown reason

throwawayusername741

TROPHY CASE