+1 for crowdsec. Basically just a forward-auth middleware in traefik terms. Pretty slick but not a waf, just an ip based allow list that's crowdsourced.