fix(m3-atlas): remove netbird-only middleware from dashboard router #16

Merged
m3tam3re merged 1 commits from fix/remove-netbird-middleware into master 2026-05-11 17:16:43 +02:00
Collaborator

Removes the netbird-only IP whitelist middleware from the hermes-dashboard Traefik router.

Access control is handled at the DNS level: dash.m3ta.dev resolves to the Netbird mesh IP (100.81.142.56) which is a CGNAT address and unreachable from the public internet. The middleware was redundant and blocking legitimate mesh traffic.

Changes:

  • Removed netbird-only middleware definition
  • Removed middlewares = ["netbird-only"] from hermes-dashboard router

Note: DNS A-record for dash.m3ta.dev must be set to 100.81.142.56 (m3-atlas Netbird IP) for this to work. TLS cert provisioning via GoDaddy DNS challenge is unaffected (uses TXT records).

Removes the `netbird-only` IP whitelist middleware from the hermes-dashboard Traefik router. Access control is handled at the DNS level: `dash.m3ta.dev` resolves to the Netbird mesh IP (`100.81.142.56`) which is a CGNAT address and unreachable from the public internet. The middleware was redundant and blocking legitimate mesh traffic. Changes: - Removed `netbird-only` middleware definition - Removed `middlewares = ["netbird-only"]` from hermes-dashboard router Note: DNS A-record for `dash.m3ta.dev` must be set to `100.81.142.56` (m3-atlas Netbird IP) for this to work. TLS cert provisioning via GoDaddy DNS challenge is unaffected (uses TXT records).
m3ta-chiron added 1 commit 2026-05-11 17:15:37 +02:00
Access control is handled at DNS level — dash.m3ta.dev resolves to
Netbird IP (100.81.142.56) which is unreachable from the public internet.
No need for IP whitelist middleware.
m3tam3re merged commit 20d2548791 into master 2026-05-11 17:16:43 +02:00
m3tam3re deleted branch fix/remove-netbird-middleware 2026-05-11 17:16:43 +02:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: m3tam3re/nixos-config#16