# CrowdSec Firewall Bouncer Configuration
# SecuBox OpenWrt Edition
#
# This bouncer fetches decisions from CrowdSec LAPI and enforces them
# using nftables with automatic expiration via timeout sets.

config bouncer
	option enabled '0'
	option ipv4 '1'
	option ipv6 '1'
	option api_url 'http://127.0.0.1:8180/'
	option api_key ''
	option update_frequency '10s'
	option priority '4'
	option deny_action 'drop'
	option deny_log '1'
	option log_prefix 'CrowdSec: '
	option log_level 'info'
	option log_max_size '100'
	option log_max_backups '3'
	option log_max_age '30'
	option filter_input '1'
	option filter_forward '1'
	option chain_name 'crowdsec-chain'
	option chain6_name 'crowdsec6-chain'
	option retry_initial_connect '1'
	list interface 'br-lan'
	list interface 'eth1'