# episode 12: the AppSec (WAF) endpoint the Caddy bouncer asks on every request.
# Listens on all addresses; ufw only lets the Docker "proxy" network in
# (see crowdsec/README.md). Needs the appsec collections AND the rules listed
# in the README, or crowdsec refuses to start.
appsec_configs:
  - crowdsecurity/appsec-default
labels:
  type: appsec
listen_addr: 0.0.0.0:7422
source: appsec