# traefik-crowdsec-bouncer

> Self-hosted HTTP service that integrates CrowdSec decisions with Traefik v2 ForwardAuth middleware to block malicious IPs before they reach your services.

- **Category:** Security
- **Licence:** MIT
- **Latest version:** v0.5.0
- **Open source:** oss
- **Languages:** Go
- **Platforms:** Docker Compose
- **Tags:** Security, Reverse Proxy, Traefik, WAF, Docker, Go, Golang, Webapp, Crowdsec, Forwardauth, Bouncer, Ip blocking, Container Image, Traefik V2, Crowdsec Bouncer

## Description

traefik-crowdsec-bouncer is a lightweight Go HTTP service that acts as a CrowdSec bouncer for Traefik v2. It uses Traefik's ForwardAuth middleware to check incoming request IPs against CrowdSec's decisions API, returning 403 Forbidden for banned IPs and allowing legitimate traffic through. The service runs as a Docker container configured via environment variables including the CrowdSec API key, agent host, log level, ban response code/message, listening port, and trusted proxies. It exposes health check endpoints (/ping, /healthz) and a Prometheus metrics endpoint. Requires a running CrowdSec agent and Traefik v2 instance.

## Links

- [Homepage](https://github.com/fbonalair/traefik-crowdsec-bouncer)
- [Docker](fbonalair/traefik-crowdsec-bouncer)
- [GitHub Repository](https://github.com/fbonalair/traefik-crowdsec-bouncer)

---
Source: https://selfhost.directory/project/traefik-crowdsec-bouncer