This guide walks you through setting up Traefik v3 as a reverse proxy using the file provider for dynamic configuration. We’ll deploy it to serve Plex (via plex.randomdomain.com) and a general website (www.randomdomain.com), with CrowdSec integration for security. The real neat thing we do in this example is setup a TCP router and service for…
Automation to update BIND with IPv4 and IPv6 from OPNSense and Portainer If you have a homelab and use BIND with your OPNSense and Docker (w/Portainer), this might be of interest! There are a few details that require either setup or creation, such as the Redis server and the API credentials that will be required…
Updated 2024-12-06: Updated both scripts, using newer suricata-update from get-go, updated classification.config, some minor adjusting of content. Updated 2024-12-18: Corrected a typo in ‘suricatamod.sh‘, there was an extra space in two places Updated 2024-12-19: As of OPNSense 24.7.11_2 we should have access to the latest ‘suricata-update‘ feature and you should not need to do the…
Edit: Extra note about this post, the Internet, and Reddit – sharing your idea – is a great idea and is a chance to learn from your peers. Yup, what this post describes is actually all is rather unnecessary as if you don’t use the “–force-recreate” flag then a simple “docker-compose up -d –always-recreate-deps –build…
Update: This guide covers using OPNSense’s native Policy based Rule management, you can also use ‘suricata-update‘ to do similar, if not more, focused/tailored Rule management. If you are interested, please see our post about enabling the modification here Using Suricata-Update on OPNSense OPNSense is an Open Source FreeBSD router, firewall, and has a modern Suricata…
