Add base terraform config

modules/apps/gateway/lib/scripts/install-crowdsec.sh

@@ -3,11 +3,18 @@ set -e
 sudo apt update
 sudo apt install -y curl gnupg lsb-release
 
+curl -s https://install.crowdsec.net | sudo bash
+sudo apt install crowdsec-firewall-bouncer-nftables
 sudo apt install crowdsec
+
+sudo cscli collections install crowdsecurity/linux --force
 sudo cscli collections install crowdsecurity/traefik
 sudo cscli collections install crowdsecurity/http-cve
 sudo cscli collections install crowdsecurity/base-http-scenarios
+sudo cscli collections install crowdsecurity/whitelist-good-actors
+sudo cscli collections install crowdsecurity/sshd
 sudo cscli parsers install crowdsecurity/geoip-enrich
+sudo cscli parsers install crowdsecurity/sshd-logs
 
 sudo systemctl enable crowdsec
 sudo systemctl restart crowdsec

modules/apps/gateway/lib/scripts/install-traefik.sh

@@ -40,6 +40,11 @@ cat > "$TRAEFIK_CONF" <<EOF
 entryPoints:
   web:
     address: ":80"
+    http:
+      redirections:
+         entrypoint:
+            to: websecure
+            scheme: https
   websecure:
     address: ":443"
 providers:

modules/apps/gateway/main.tf

@@ -30,8 +30,8 @@ module "vm" {
         restore-backup-script = indent(6, file("${path.module}/lib/scripts/restore-backup.sh"))
         restore-backup-service = indent(6, file("${path.module}/../common/services/docker/restore-backup.service"))
         create-backup-script = indent(6, file("${path.module}/lib/scripts/create-backup.sh"))
-        create-backup-service = indent(6, file("${path.module}}/../common/services/docker/create-backup.service"))
-        create-backup-timer = indent(6, file("${path.module}}/../common/services/create-backup.timer"))
+        create-backup-service = indent(6, file("${path.module}/../common/services/docker/create-backup.service"))
+        create-backup-timer = indent(6, file("${path.module}/../common/services/create-backup.timer"))
         nginx-error-configuration = indent(6, file("${path.module}/lib/scripts/default"))
         nginx-error-502 = indent(6, file("${path.module}/lib/scripts/502.html"))
         env-file-content = indent(6, file("${path.module}/.env"))