m3tam3re/nixos-config
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Compare commits

base: m3tam3re/nixos-config:354791f2521af288e0988a4b071aae121366034b
Branches Tags
m3tam3re/nixos-config:master m3tam3re/nixos-config:__dolt_remote_info__ m3tam3re/nixos-config:feature/agent-lib-m3-kratos m3tam3re/nixos-config:feat/hyprland-lua
...
compare: m3tam3re/nixos-config:20d254879140f87dae3602ae6cc17cdc1047fe89
Branches Tags
m3tam3re/nixos-config:master m3tam3re/nixos-config:__dolt_remote_info__ m3tam3re/nixos-config:feature/agent-lib-m3-kratos m3tam3re/nixos-config:feat/hyprland-lua

2 Commits
354791f252 ... 20d2548791

Author SHA1 Message Date
m3tam3re 20d2548791 Merge pull request 'fix(m3-atlas): remove netbird-only middleware from dashboard router' (#16) from fix/remove-netbird-middleware into master 
Reviewed-on: #16
 2026-05-11 17:16:42 +02:00
m3ta-chiron a957fd1372 fix(m3-atlas): remove netbird-only middleware from dashboard router 
Access control is handled at DNS level — dash.m3ta.dev resolves to
Netbird IP (100.81.142.56) which is unreachable from the public internet.
No need for IP whitelist middleware.
 2026-05-11 17:15:16 +02:00
1 changed files with 0 additions and 7 deletions
Expand all files Collapse all files
hosts/m3-atlas/services/traefik.nix
-7
View File
@@ -56,12 +56,6 @@
}; };
}; };
middlewares = { middlewares = {
# Hermes Dashboard — Netbird mesh only
netbird-only = {
ipWhiteList = {
sourceRange = ["100.64.0.0/16"];
};
};
domain-redirect = { domain-redirect = {
redirectRegex = { redirectRegex = {
regex = "^https://www\\.m3tam3re\\.com(.*)"; regex = "^https://www\\.m3tam3re\\.com(.*)";
@@ -95,7 +89,6 @@
hermes-dashboard = { hermes-dashboard = {
rule = "Host(`dash.m3ta.dev`)"; rule = "Host(`dash.m3ta.dev`)";
service = "hermes-dashboard"; service = "hermes-dashboard";
middlewares = ["netbird-only"];
entrypoints = ["websecure"]; entrypoints = ["websecure"];
tls = { tls = {
certResolver = "godaddy"; certResolver = "godaddy";