Files
cluster/services/authentik/middleware-lan.yaml
T
willemjan 43fdc020f4 feat: lan-only + force-ssl for argocd/authentik/adguard labzand.com ingresses
ipAllowList middleware (192.168.0.0/16) on the websecure routers blocks
external access; separate IngressRoute on web 301-redirects http->https.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
2026-11-14 16:37:02 +01:00

14 lines
338 B
YAML

# Middleware voor auth.labzand.com (alleen intern): blokkeert verkeer
# van buiten het LAN op de websecure-router.
# (redirect-https staat in redirect.yaml)
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: lan-only
namespace: authentik
spec:
ipAllowList:
sourceRange:
- 192.168.0.0/16
- 127.0.0.1/32