mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-20 23:16:49 +00:00
Scooby HuskyandClaude Sonnet 5
33b0d018f9
Confirmed 2026-08-17: home's public IP gets a 403 ForbiddenException from AWS WAF in front of api.crowdsec.net, even on a bare unauthenticated test request - the VPS's IP gets a normal 401 on the identical request. This is an IP-level block unrelated to credentials, which is why LAPI kept hitting 403 on both anonymous auto-registration and console enroll with a fresh, valid enrollment key. Fix: HTTPS_PROXY/HTTP_PROXY pointed at a tinyproxy instance on the VPS (bound to its Netbird interface only, not internet-reachable), reachable from home over the existing Netbird mesh via netbird-cluster-router. cscli/crowdsec's Go HTTP client honors standard proxy env vars. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>