# Middlewares voor adguard.labzand.com (alleen intern):
# - redirect-https: http (web) -> https
# - lan-only: blokkeert verkeer van buiten het LAN op de websecure-router
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: redirect-https
  namespace: adguard
spec:
  redirectScheme:
    scheme: https
    permanent: true
---
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: lan-only
  namespace: adguard
spec:
  ipAllowList:
    sourceRange:
      - 192.168.0.0/16
      - 127.0.0.1/32