Commit initial : infrastructure Ansible pour homeserver

- Playbooks Ansible avec rôles (common, cockpit, docker, services)
- 30+ stacks Docker Compose avec reverse proxy Traefik
- Ansible Vault pour gestion secrets
- Intégration CrowdSec pour détection intrusions
- Versions images Docker fixées pour reproductibilité

stacks/crowdsec/config/notifications/http.yaml

@@ -0,0 +1,43 @@
+type: http          # Don't change
+name: http_default # Must match the registered plugin in the profile
+
+# One of "trace", "debug", "info", "warn", "error", "off"
+log_level: info
+
+# group_wait:         # Time to wait collecting alerts before relaying a message to this plugin, eg "30s"
+# group_threshold:    # Amount of alerts that triggers a message before <group_wait> has expired, eg "10"
+# max_retry:          # Number of attempts to relay messages to plugins in case of error
+# timeout:            # Time to wait for response from the plugin before considering the attempt a failure, eg "10s"
+
+#-------------------------
+# plugin-specific options
+
+# The following template receives a list of models.Alert objects
+# The output goes in the http request body
+format: |
+  {{ range . -}}
+  {{ $alert := . -}}
+  {
+    "extras": {
+      "client::display": {
+      "contentType": "text/markdown"
+    }
+  },
+  "priority": 3,
+  {{range .Decisions -}}
+  "title": "{{.Type }} {{ .Value }} for {{.Duration}}",
+  "message": "{{.Scenario}}  \n\n[crowdsec cti](https://app.crowdsec.net/cti/{{.Value -}})  \n\n[shodan](https://shodan.io/host/{{.Value -}})"
+  {{end -}}
+  }
+  {{ end -}}
+
+# The plugin will make requests to this url, eg:  https://www.example.com/
+url: https://gotify.local.tellserv.fr/message
+
+# Any of the http verbs: "POST", "GET", "PUT"...
+method: POST
+
+headers:
+  X-Gotify-Key: AeZtF1pTuEaMbF0
+  Content-Type: application/json
+# skip_tls_verification:  # true or false. Default is false