Opened Firewall, Added Dashboard-stuff

README.md

@@ -92,6 +92,12 @@ Ram: 3GB of Host
 
 Build: `nixos-rebuild build-vm --flake .#U3ncSovm`
 
+Run VM:
+```bash
+export QEMU_NET_OPTS="hostfwd=tcp::443-:443"
+/nix/store/00your00hash00of00build999999999-nixos-vm/bin/run-U3ncSovm-vm
+```
+
 ## License
 
 [MIT © kB01](../LICENSE)

modules/nixos/services/nas/audiobookshelf.nix

@@ -20,9 +20,9 @@ in
     services.traefik.dynamicConfigOptions = {
       http.routers.audiobookshelf.entrypoints = "websecure";
       http.routers.audiobookshelf.tls = true;
-      http.routers.audiobookshelf.rule = "Host(`audiobookshelf.U3ncSovm`)";
+      http.routers.audiobookshelf.rule = "Host(`audiobookshelf.localhost`)";
       http.routers.audiobookshelf.service = "audiobookshelf";
-      services.audiobookshelf.loadBalancer.servers = [ { url = "http://localhost:63001"; } ];
+      services.audiobookshelf.loadBalancer.servers = [ { url = "http://localhost:63001/"; } ];
     };
   };
 }

modules/nixos/services/nas/traefik-proxy.nix

@@ -11,7 +11,7 @@ let
 in
 {
   config = lib.mkIf (cfg.enable && cfg.useTraefik.enable) {
-
+    # Default Config
     services.traefik = {
       enable = true;
       staticConfigOptions = {
@@ -19,6 +19,19 @@ in
         entryPoints.websecure.address = ":443";
       };
     };
+    networking.firewall.interfaces.eth0.allowedTCPPorts = [ 80 443 ];
+
+    # Enable Secure Dashboard
+    services.traefik.staticConfigOptions.api = {};
+    services.traefik.dynamicConfigOptions = {
+      http.routers.dashboard.entrypoints = "websecure";
+      http.routers.dashboard.tls = true;
+      http.routers.dashboard.rule = "Host(`traefik.localhost`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))";
+      http.routers.dashboard.service = "api@internal";
+      http.routers.dashboard.middlewares = "auth";
+      http.middlewares.auth.basicauth.users = "master:\$\$2y\$\$05\$\$JwzsNHz7CMJh0RU1eMe3AOfY5H30Qr1Q/glS1r/qEHCNpo5LvWnRW";
+    };
+
   };
 }
 

systems/x86_64-linux/U3ncSovm/default.nix

@@ -28,6 +28,7 @@
   users.users.master = {
     initialPassword = "test";
     openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF82e+j7y8qsSvLn/DZuosvsH0S2EsHpqDkvZ8jiONm3 kb@LoyAdjo"
     ];
     isNormalUser = true;
     extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
@@ -48,7 +49,7 @@
   # Enable NAS Functionality
   services.nas = {
     enable = true;
-    servers.audiobookshelf = true;
+    servers.audiobookshelf.enable = true;
   };
 
   # SSH and Mosh