fix(homelab)!: use traefik middleware to restrict WAN access

nix/homelab/kustomize/routes/home-assistant.yaml

@@ -10,6 +10,12 @@ spec:
   hostnames:
     - "home-assistant.lucalise.ca"
   rules:
-    - backendRefs:
+    - filters:
+        - type: ExtensionRef
+          extensionRef:
+            group: traefik.io
+            kind: Middleware
+            name: private-networks
+      backendRefs:
         - name: home-assistant
           port: 8080

nix/homelab/kustomize/routes/longhorn.yaml

@@ -10,6 +10,12 @@ spec:
   hostnames:
     - "storage.lucalise.ca"
   rules:
-    - backendRefs:
+    - filters:
+        - type: ExtensionRef
+          extensionRef:
+            group: traefik.io
+            kind: Middleware
+            name: private-networks
+      backendRefs:
         - name: longhorn-frontend
           port: 80

nix/homelab/kustomize/routes/pihole.yaml

@@ -1,7 +1,7 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: longhorn
+  name: pihole
   namespace: pihole-system
 spec:
   parentRefs:
@@ -10,6 +10,12 @@ spec:
   hostnames:
     - "pihole.lucalise.ca"
   rules:
-    - backendRefs:
+    - filters:
+        - type: ExtensionRef
+          extensionRef:
+            group: traefik.io
+            kind: Middleware
+            name: private-networks
+      backendRefs:
         - name: pihole-web
           port: 80