pixelifytica/nixos
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Remove ssh forwarding from traefik, remove traefik auth from internal connections

Browse source
This commit is contained in:
Evie Litherland-Smith 2023-05-30 10:08:26 +01:00
parent 7d57d89e02
commit a69d0a1a92
4 changed files with 6 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
services/Vanguard.nix
View file

@ -1,14 +1,13 @@
{...}: {
imports = [
./adguardhome
./traefik/adguardhome.nix
./gitea
./traefik/gitea.nix
./nextcloud
./sshd
./traefik/adguardhome.nix
./traefik/gitea.nix
./traefik/nextcloud.nix
./traefik/qbittorrent.nix
./sshd
./traefik/sshd.nix
./syncthing/Vanguard.nix
];
}

5
services/traefik/default.nix
View file

@ -12,8 +12,8 @@
scheme = "https";
};
};
https = {address = ":443";};
traefik-internal = {address = ":8080";};
https.address = ":443";
traefik-internal.address = ":8080";
};
certificatesResolvers = {
default = {
@ -37,7 +37,6 @@
rule = "ClientIP(`192.168.0.0/16`)";
entryPoints = ["traefik-internal"];
service = "api@internal";
middlewares = ["auth"];
};
middlewares = {
auth.basicAuth.users = ["xenia:$apr1$LB0wVd6I$BHVPIyh.F5Ewt9/7PqAtS."];

2
services/traefik/gitea.nix
View file

@ -1,5 +1,5 @@
{...}: {
imports = [./default.nix ./sshd.nix];
imports = [./default.nix];
services.traefik.dynamicConfigOptions = {
http = {
routers.gitea = {

11
services/traefik/sshd.nix
View file

@ -1,11 +0,0 @@
{...}: {
imports = [./default.nix];
services.traefik.dynamicConfigOptions.tcp = {
routers.ssh = {
rule = "ClientIP(`192.168.0.0/16`)";
entryPoints = ["ssh"];
service = "ssh-redirect";
};
services.ssh-redirect.loadBalancer.servers = [{address = "localhost:22";}];
};
}