Free Open-Source WAF Stack in Front of Traefik: ModSecurity + CrowdSec
This is a full production reverse-proxy stack built around Traefik v3, with two independent, free WAF layers, IP-reputation blocking backed by real threat-intel feeds, Let’s Encrypt via Cloudflare DNS-01, HTTP/3, and rotated logs — all running as plain Docker containers,…