sops sops sops

hosts/nas/apps/traefik/default.nix

@@ -18,6 +18,9 @@ let
   lubeloggerUrl = "http://10.0.1.18:6754";
   immichUrl = "http://10.0.1.18:2283";
 
+  # internal services
+  codeUrl = "http://10.0.1.18:4444";
+
   # Plugins
   traefikPlugins = {
     bouncer = {
@@ -208,6 +211,15 @@ in
               };
             };
           };
+          internal-ipallowlist = 
+          {
+            ipAllowList = {
+              sourceRange = [
+                "127.0.0.1/32"
+                "10.0.1.0/24"
+              ];
+            };
+          };
         };
 
         services = {
@@ -281,6 +293,13 @@ in
               url = immichUrl;
             }
           ];
+
+          # internal services
+          code.loadBalancer.servers = [
+            {
+              url = codeUrl;
+            }
+          ];
         };
 
         routers = {
@@ -371,6 +390,15 @@ in
             middlewares = [ "crowdsec" "whitelist-geoblock" ];
             tls.certResolver = "letsencrypt";
           };
+
+          # internal services
+          code = {
+            entryPoints = [ "websecure" ];
+            rule = "Host(`code.${domain}`)";
+            service = "code";
+            middlewares = [ "internal-ipallowlist" ];
+            tls.certResolver = "letsencrypt";
+          };
         };
       };
     };