From fb9aaf1a949df8fbd4b91f151a01c5d503b30044 Mon Sep 17 00:00:00 2001
From: Aykhan Shahsuvarov <aykhan.shahs@gmail.com>
Date: Thu, 2 Jul 2026 08:26:07 +0000
Subject: [PATCH] caddy: drop appsec WAF from sftpgo and immich to fix >10MB
 upload 403s

---
 caddy/Caddyfile              | 4 ++--
 crowdsec/docker-compose.yaml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index 47ef63e..4adfa47 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -128,7 +128,7 @@
         max_size 8120MB
     }
     route {
-        import security
+        crowdsec
         reverse_proxy http://sftpgo:8080 {
             header_up Host {http.request.host}
         }
@@ -170,7 +170,7 @@
         max_size 1024MB
     }
     route {
-        import security
+        crowdsec
         reverse_proxy http://immich_server:2283 {
             header_up Host {http.request.host}
         }
diff --git a/crowdsec/docker-compose.yaml b/crowdsec/docker-compose.yaml
index b45ce90..42762c1 100644
--- a/crowdsec/docker-compose.yaml
+++ b/crowdsec/docker-compose.yaml
@@ -51,7 +51,7 @@ services:
     deploy:
       resources:
         limits:
-          cpus: "1.0"
+          cpus: "0.6"
           memory: 768M
     logging:
       driver: "json-file"
@@ -68,7 +68,7 @@ services:
     environment:
       CROWDSEC_LAPI_URL: "http://crowdsec:8080"
       CROWDSEC_API_KEY: "${CROWDSEC_BOUNCER_KEY_EXPORTER}"
-      POLL_INTERVAL_SECS: "120"
+      POLL_INTERVAL_SECS: "300"
       LISTEN_PORT: "9100"
       GEOIP_CITY_DB: "/geoip/GeoLite2-City.mmdb"
     volumes: