feat: herdr + agent network over netbird

hosts/m3-atlas/services/rustfs.nix

@@ -8,10 +8,8 @@
     enable = true;
     environmentFile = config.age.secrets.rustfs-env.path;
     settings = {
-      # Reuse existing MinIO data directory
       RUSTFS_VOLUMES = "/var/storage/s3";
 
-      # Keep same ports as MinIO to avoid changing Traefik and client configs
       RUSTFS_ADDRESS = ":3008";
       RUSTFS_CONSOLE_ENABLE = "true";
       RUSTFS_CONSOLE_ADDRESS = ":3007";
@@ -22,18 +20,18 @@
 
   # Traefik configuration — same routes as before
   services.traefik.dynamicConfigOptions.http = {
-    services.minio-console.loadBalancer.servers = [
+    services.rustfs-console.loadBalancer.servers = [
       {
         url = "http://localhost:3007/";
       }
     ];
-    services.minio.loadBalancer.servers = [
+    services.rustfs.loadBalancer.servers = [
       {
         url = "http://localhost:3008/";
       }
     ];
 
-    routers.minio = {
+    routers.rustfs = {
       rule = "Host(`s3.m3tam3re.com`)";
       tls = {
         certResolver = "godaddy";
@@ -41,13 +39,31 @@
       service = "minio";
       entrypoints = "websecure";
     };
-    routers.minio-console = {
+    routers.rustfs-console = {
+      rule = "Host(`s3c.m3ta.dev`)";
+      tls = {
+        certResolver = "godaddy";
+      };
+      service = "rustfs-console";
+      entrypoints = "websecure";
+    };
+    routers.rustfs-old = {
+      rule = "Host(`s3.m3ta.dev`)";
+      tls = {
+        certResolver = "godaddy";
+      };
+      service = "rustfs";
+      entrypoints = "websecure";
+      middlewares = ["subdomain-redirect"];
+    };
+    routers.rustfs-console-old = {
       rule = "Host(`minio.m3tam3re.com`)";
       tls = {
         certResolver = "godaddy";
       };
-      service = "minio-console";
+      service = "rustfs";
       entrypoints = "websecure";
+      middlewares = ["subdomain-redirect"];
     };
   };
 }