Help with whitelist rules - expression with portion of URL

For some reason this (first option listed) turns up errors when I try it.

service crowdsec status
crowdsec.service - Crowdwatch agent
Loaded: loaded (/etc/systemd/system/crowdsec.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Sat 2020-11-07 15:43:05 GMT; 795ms ago
Process: 22442 ExecReload=/bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS)
Main PID: 30418 (code=exited, status=1/FAILURE)

Nov 07 15:43:02 xxx.com systemd[1]: Reloading Crowdwatch agent.
Nov 07 15:43:02 xxx.com systemd[1]: Reloaded Crowdwatch agent.
Nov 07 15:43:05 xxx.com systemd[1]: crowdsec.service: Main process exited, code=exited, status=1/FAILURE
Nov 07 15:43:05 xxx.com systemd[1]: crowdsec.service: Unit entered failed state.
Nov 07 15:43:05 xxx.com systemd[1]: crowdsec.service: Failed with result ‘exit-code’.

Need to whitelist a couple static IPs which we use to access remote VPS.

Currently I’ve put the IPs in whitelists.yaml but, of course, it show up as tainted during updates.

What have I missed?