Opened Firewall, Added Dashboard-stuff
Some checks failed
/ Check NixOS Configuration (push) Has been cancelled

This commit is contained in:
Kaybee 2024-11-30 02:34:20 +01:00
parent e8e469f2a9
commit 5be4192143
Signed by: kb01
SSH key fingerprint: SHA256:gP6opHVPcRQWO2nBbCcsXmXLtGrxzdRbP+frT4AAJFs

View file

@ -11,25 +11,27 @@ let
in in
{ {
config = lib.mkIf (cfg.enable && cfg.useTraefik.enable) { config = lib.mkIf (cfg.enable && cfg.useTraefik.enable) {
# Default Config
services.traefik = { services.traefik = {
enable = true; enable = true;
staticConfigOptions = { staticConfigOptions = {
entryPoints.web.address = ":80"; entryPoints.web.address = ":80";
entryPoints.websecure.address = ":443"; entryPoints.websecure.address = ":443";
api = {
insecure = true;
};
};
dynamicConfigOptions = {
# http.routers.dashboard.entrypoints = "websecure";
# http.routers.dashboard.tls = true;
# http.routers.dashboard.rule = "Host(`traefik.localhost`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))";
# http.routers.dashboard.service = "api@internal";
# http.routers.dashboard.middlewares = "auth";
# http.middlewares.auth.basicauth.users = "master:\$\$2y\$\$05\$\$YWM0ZknINeHpJsNqqsd91eF/yl.S8t12TPQsDmf92glrjGW9Y1RvO";
}; };
}; };
networking.firewall.interfaces.eth0.allowedTCPPorts = [ 80 443 ];
# Enable Secure Dashboard
services.traefik.staticConfigOptions.api = {};
services.traefik.dynamicConfigOptions = {
http.routers.dashboard.entrypoints = "websecure";
http.routers.dashboard.tls = true;
http.routers.dashboard.rule = "Host(`traefik.localhost`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))";
http.routers.dashboard.service = "api@internal";
http.routers.dashboard.middlewares = "auth";
http.middlewares.auth.basicauth.users = "master:\$\$2y\$\$05\$\$JwzsNHz7CMJh0RU1eMe3AOfY5H30Qr1Q/glS1r/qEHCNpo5LvWnRW";
};
}; };
} }