feat(security): external IP blocklist sync for the local CrowdSec engine

scripts/crowdsec-setup.sh

@@ -13,7 +13,8 @@ case "$mode" in
   enable|--enable) ;;
   status|--status) ;;
   disable|--disable) ;;
-  *) echo "Usage: bash cms security [enable|status|disable]" >&2; exit 1 ;;
+  blocklists|blocklists-install-cron|blocklists-uninstall-cron) ;;
+  *) echo "Usage: bash cms security [enable|status|disable|blocklists|blocklists-install-cron|blocklists-uninstall-cron]" >&2; exit 1 ;;
 esac
 
 umask 077
@@ -25,6 +26,12 @@ exec 9>"$DIR/.deploy.lock"
 flock -w 30 9 || fail "Another installation or update is running."
 [[ -f "$ENV_FILE" ]] || fail "Create .env first (bash cms install)."
 
+case "$mode" in
+  blocklists) exec bash "$DIR/scripts/blocklists-sync.sh" sync "${2:-}" ;;
+  blocklists-install-cron) exec bash "$DIR/scripts/blocklists-sync.sh" install-cron ;;
+  blocklists-uninstall-cron) exec bash "$DIR/scripts/blocklists-sync.sh" uninstall-cron ;;
+esac
+
 env_get() {
   local key="$1" line
   while IFS= read -r line || [[ -n "$line" ]]; do