From b3b0d5b553e826508a6e27fac5cac423d9e95b57 Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Tue, 18 Nov 2025 15:13:45 +0100
Subject: [PATCH] refactor: sepparate traefik production routers

---
 traefik/dynamic/routers-prod.yml | 132 +++++++++++++++++++++++++++++++
 1 file changed, 132 insertions(+)
 create mode 100644 traefik/dynamic/routers-prod.yml

diff --git a/traefik/dynamic/routers-prod.yml b/traefik/dynamic/routers-prod.yml
new file mode 100644
index 0000000..3643d65
--- /dev/null
+++ b/traefik/dynamic/routers-prod.yml
@@ -0,0 +1,132 @@
+http:
+  routers:
+    # Traefik Dashboard (ADMIN, without subdomeain)
+    traefik-dashboard:
+      rule: "Host(`traefik.forust.xyz`)"
+      entryPoints:
+        - websecure
+      service: api@internal
+      middlewares:
+        - auth
+        - security-headers
+      tls: {}
+
+    # Nextcloud AIO Interface (ADMIN, without subdomeain)
+    nextcloud-aio:
+      rule: "Host(`nextcloud-aio.forust.xyz`)"
+      entryPoints:
+        - websecure
+      service: nextcloud-aio
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Termix (public (account required))
+    termix:
+      rule: "Host(`termix.forust.xyz`)"
+      entryPoints:
+        - websecure
+      service: termix
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # MeTube
+    metube: (public (auth required))
+      rule: "Host(`metube.forust.xyz`)"
+      entryPoints:
+        - websecure
+      service: metube
+      middlewares:
+        - metube-auth
+        - security-headers
+      tls: {}
+    
+    # Portainer (public (account required))
+    portainer:
+      rule: "Host(`portainer.forust.xyz`)"
+      entryPoints:
+        - websecure
+      service: portainer
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Uptime Kuma (public (account required))
+    uptime-kuma:
+      rule: "Host(`uptime.forust.xyz`)"
+      entryPoints:
+        - websecure
+      service: uptime-kuma
+      tls: {}
+
+    # AdGuard Home (public (account required))
+    adguard:
+      rule: "Host(`adguard.forust.xyz`)"
+      entryPoints:
+        - websecure
+      service: adguard
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Nextcloud Main (public (account required))
+    nextcloud:
+      rule: "Host(`nextcloud.forust.xyz`)"
+      entrypoints:
+        - websecure
+      service: nextcloud
+      middlewares:
+        - nextcloud-chain
+      tls: {}
+
+    # Dockmon (public (account required))
+    dockmon:
+      rule: "Host(`dockmon.forust.xyz`)"
+      entryPoints:
+        - websecure
+      service: dockmon
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Gitea (public (account required))
+    gitea:
+      rule: "Host(`gitea.forust.xyz`)"
+      entryPoints:
+        - websecure
+        - ssh
+      service: gitea
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Glance (public, without subdomain)
+    glance:
+      rule: "Host(`glance.forust.xyz`)"
+      entryPoints:
+        - websecure
+      service: glance
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Watercrawl (public, without subdomain)
+    watercrawl:
+      rule: "Host(`watercrawl.fourst.xyz`)"
+      entryPoints:
+        - websecure
+      service: watercrawl
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # N8N (public, without subdomain)
+    n8n:
+      rule: "Host(`n8n.forust.xyz`)"
+      entryPoints:
+        - websecure
+      service: n8n
+      middlewares:
+        - security-headers
+      tls: {}
\ No newline at end of file