From d1adaa54b14734107f3c8ab2471e0efb0e4069c1 Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Tue, 18 Nov 2025 15:19:27 +0100
Subject: [PATCH] feat: Add routers for local access

---
 traefik/dynamic/routers-local.yml | 134 ++++++++++++++++++++++++++++++
 1 file changed, 134 insertions(+)
 create mode 100644 traefik/dynamic/routers-local.yml

diff --git a/traefik/dynamic/routers-local.yml b/traefik/dynamic/routers-local.yml
new file mode 100644
index 0000000..d647f95
--- /dev/null
+++ b/traefik/dynamic/routers-local.yml
@@ -0,0 +1,134 @@
+http:
+  routers:
+    # Traefik Dashboard (local access, ADMIN, local only)
+    traefik-dashboard-local:
+      rule: "Host(`traefik.workstation`)"
+      entryPoints:
+        - websecure
+      service: api@internal
+      middlewares:
+        # - auth
+        - security-headers
+      tls: {}
+
+
+    # Nextcloud AIO Interface (local access. ADMIN, local only)
+    nextcloud-aio-local:
+      rule: "Host(`nextcloud-aio.workstation`)"
+      entryPoints:
+        - websecure
+      service: nextcloud-aio
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Termix (local access, (account required))
+    termix-local:
+      rule: "Host(`termix.workstation`)"
+      entryPoints:
+        - websecure
+      service: termix
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # MeTube (local access, (auth required))
+    metube-local:
+      rule: "Host(`metube.workstation`)"
+      entryPoints:
+        - websecure
+      service: metube
+      middlewares:
+        - metube-auth
+        - security-headers
+      tls: {}
+    
+    # Portainer (dev acess, (account required))
+    portainer-local:
+      rule: "Host(`portainer.workstation`)"
+      entryPoints:
+        - websecure
+      service: portainer
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Uptime Kuma (local access, (account required))
+    uptime-kuma-local:
+      rule: "Host(`uptime.workstation`)"
+      entryPoints:
+        - websecure
+      service: uptime-kuma
+      tls: {}
+
+    # AdGuard Home (local access, (account required))
+    adguard-local:
+      rule: "Host(`adguard.workstation`)"
+      entryPoints:
+        - websecure
+      service: adguard
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Nextcloud Main (public (account required))
+    nextcloud-local:
+      rule: "Host(`nextcloud.workstation`)"
+      entrypoints:
+        - websecure
+      service: nextcloud
+      middlewares:
+        - nextcloud-chain
+      tls: {}
+
+    # Dockmon (local access (account required))
+    dockmon-local:
+      rule: "Host(`dockmon.workstation`)"
+      entryPoints:
+        - websecure
+      service: dockmon
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Gitea (local access (account required))
+    gitea-local:
+      rule: "Host(`gitea.workstation`)"
+      entryPoints:
+        - websecure
+        - ssh
+      service: gitea
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Glance (local access)
+    glance-local:
+      rule: "Host(`glance.workstation`)"
+      entryPoints:
+        - websecure
+      service: glance
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Watercrawl (local access)
+    watercrawl-local:
+      rule: "Host(`watercrawl.workstation`)"
+      entryPoints:
+        - websecure
+      service: watercrawl
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # N8N (local only)
+    n8n-local:
+      rule: "Host(`n8n.workstation`)"
+      entryPoints:
+        - websecure
+      service: n8n
+      middlewares:
+        - security-headers
+      tls: {}
+