Remove ssh forwarding from traefik, remove traefik auth from internal connections

services/Vanguard.nix

@@ -1,14 +1,13 @@
 {...}: {
   imports = [
     ./adguardhome
-    ./traefik/adguardhome.nix
     ./gitea
-    ./traefik/gitea.nix
     ./nextcloud
+    ./sshd
+    ./traefik/adguardhome.nix
+    ./traefik/gitea.nix
     ./traefik/nextcloud.nix
     ./traefik/qbittorrent.nix
-    ./sshd
-    ./traefik/sshd.nix
     ./syncthing/Vanguard.nix
   ];
 }

services/traefik/default.nix

@@ -12,8 +12,8 @@
             scheme = "https";
           };
         };
-        https = {address = ":443";};
+        https.address = ":443";
-        traefik-internal = {address = ":8080";};
+        traefik-internal.address = ":8080";
       };
       certificatesResolvers = {
         default = {
@@ -37,7 +37,6 @@
         rule = "ClientIP(`192.168.0.0/16`)";
         entryPoints = ["traefik-internal"];
         service = "api@internal";
-        middlewares = ["auth"];
       };
       middlewares = {
         auth.basicAuth.users = ["xenia:$apr1$LB0wVd6I$BHVPIyh.F5Ewt9/7PqAtS."];

services/traefik/gitea.nix

@@ -1,5 +1,5 @@
 {...}: {
-  imports = [./default.nix ./sshd.nix];
+  imports = [./default.nix];
   services.traefik.dynamicConfigOptions = {
     http = {
       routers.gitea = {

services/traefik/sshd.nix

@@ -1,11 +0,0 @@
-{...}: {
-  imports = [./default.nix];
-  services.traefik.dynamicConfigOptions.tcp = {
-    routers.ssh = {
-      rule = "ClientIP(`192.168.0.0/16`)";
-      entryPoints = ["ssh"];
-      service = "ssh-redirect";
-    };
-    services.ssh-redirect.loadBalancer.servers = [{address = "localhost:22";}];
-  };
-}