fix(homelab)!: use traefik middleware to restrict WAN access

2025-12-27 23:29:35 -08:00
parent 13e61322a0
commit d1b81ce0db
11 changed files with 118 additions and 11 deletions
--- a/nix/homelab/kustomize/routes/pihole.yaml
+++ b/nix/homelab/kustomize/routes/pihole.yaml
@@ -1,7 +1,7 @@
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
-  name: longhorn
+  name: pihole
  namespace: pihole-system
 spec:
  parentRefs:
@@ -10,6 +10,12 @@ spec:
  hostnames:
    - "pihole.lucalise.ca"
  rules:
-    - backendRefs:
+    - filters:
+        - type: ExtensionRef
+          extensionRef:
+            group: traefik.io
+            kind: Middleware
+            name: private-networks
+      backendRefs:
        - name: pihole-web
          port: 80