Add traefik route with auth for syncthing-webinterface

Add auth to adguardhome and grafana traefik routes as well
This commit is contained in:
Evie Litherland-Smith 2023-10-26 17:22:47 +01:00
parent 825002f0ec
commit d5b54b8551
4 changed files with 50 additions and 47 deletions

View file

@ -1,26 +1,14 @@
{ config, lib, pkgs, user, ... }:
let devices = [ "Ion" "Legion" "Northstar" "Ronin" "Vanguard" ];
in {
imports = [ ../traefik/syncthing.nix ];
services.syncthing = {
enable = true;
systemService = true;
overrideDevices = false;
overrideFolders = true;
openDefaultPorts = true;
settings = {
devices = {
"Ion".id =
"7DD4NPH-6T2ET5A-4FCLFWW-CS6UR2W-IO5XQXC-DM5B2Q4-6X7DGU2-UKKVEAB";
"Legion".id =
"6OX54CG-EAQMXKA-K7TXB5P-G5A27HB-52JE2FA-XNAYZU6-YMIDBXP-RKPBJQV";
"Northstar".id =
"HNK5Z72-757G3BP-I4PBWXY-FM5FWCM-ES4XP56-E5ULWB5-RGRCBUI-RHWRXQV";
"Ronin".id =
"ZOL5YHK-ZZZULIE-UHGVKHW-H5E4BP7-S4CZBOX-OIZVUCV-RZUXOKA-QVBUBAJ";
"Vanguard".id =
"I366QNQ-D3FTDRX-RNOTXMW-YITZXOF-DSCDMQD-63Q72LI-ME2Y4HZ-T34RMQK";
};
folders = {
settings.folders = {
"Documents" = {
inherit devices;
id = "gvggx-6telk";
@ -47,5 +35,4 @@ in {
};
};
};
};
}

View file

@ -7,6 +7,7 @@
rule = "Host(`guard.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "adguard-webinterface";
middlewares = [ "auth" ];
tls = { certResolver = "default"; };
};
services.adguard-webinterface.loadBalancer.servers =

View file

@ -2,16 +2,15 @@
{
imports = [ ./default.nix ];
services.traefik.dynamicConfigOptions = {
http = {
services.traefik.dynamicConfigOptions.http = {
routers.grafana = {
rule = "Host(`grafana.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "grafana-webinterface";
middlewares = [ "auth" ];
tls = { certResolver = "default"; };
};
services.grafana-webinterface.loadBalancer.servers =
[{ url = "http://localhost:3100"; }];
};
};
}

View file

@ -0,0 +1,16 @@
{ config, lib, pkgs, ... }:
{
imports = [ ./default.nix ];
services.traefik.dynamicConfigOptions.http = {
routers.syncthing = {
rule = "Host(`sync.xenia.me.uk`)";
entryPoints = [ "http" "https" ];
service = "syncthing-webinterface";
middlewares = [ "auth" ];
tls = { certResolver = "default"; };
};
services.syncthing-webinterface.loadBalancer.servers =
[{ url = "http://localhost:8384"; }];
};
}