Version 2.1.6
A one-fix release: agents install and check in behind Traefik with the CrowdSec bouncer's AppSec enabled. This fix was listed in the 2.1.5 notes but missed that release.
Upgrading
docker compose pull
docker compose up -dNo database or configuration changes. The fix is in the agent: existing hosts receive it through agent auto-update (on at Settings > Agent Updates) at their next restart or daily full report, and new installs get it from the upgraded server.
Fixes
Agent install failed with a 403 behind Traefik and CrowdSec. Behind Traefik with the CrowdSec bouncer's AppSec enabled, the installer's connectivity test failed with ping request failed with status 403 and the agent service was never created. The agent's check-in carried no body length over HTTP/2, which the bouncer blocks by default. The agent now always sends one. Until your agents are updated, setting crowdsecAppsecUnreadableBodyBlock: false on the bouncer middleware works around it.
Every change in this release
Issue | PR | Change |
|---|---|---|
Agent install and check-in no longer fail with a 403 behind Traefik with the CrowdSec bouncer's AppSec over HTTP/2. |
What is coming next
Bug fixes are tracked in GitHub milestones. Feature requests live on feedback.patchmon.net, where you can propose an idea, vote on existing ones, and see what has been accepted onto the roadmap.
Questions about this release
This release has its own thread under New Release Discussions. Open a new issue for a reproducible bug not already covered.