Centralized management with multiple NGINX server

crowdsec
1

Hello Community,

I have a question about centralizing the CrowdSec server. We have multiple NGINX servers, and I would like to install the bouncer on each server but use only one centralized CrowdSec server for configuration. Is this possible? Is it sufficient to install the bouncer on the NGINX servers with a custom API URL?

Thanks for help
Sebastian

2

Yes this is possible as you can expose the LAPI to the internal LAN or WAN even, however, if you plan to do this all over the WAN side I would suggest using TLS either through a reverse proxy (tls termination) or a self signed cert or even mTLS.