security: blindaje de dashboard con doble factor (muro-seguro + auth) y alias de host

traefik/dynamic/dashboard.yml

@@ -1,11 +1,16 @@
+# ################################################################# #
+# CONFIGURACIÓN DEL DASHBOARD DE TRAEFIK - ACCESO SEGURO            #
+# ################################################################# #
+
 http:
   routers:
-    api:
+    router-traefik-dash:
       rule: "Host(`traefik.ognir-server.synology.me`) || Host(`ognir-server.synology.me`)"
-      service: api@internal
-      middlewares:
-        - auth-dashboard@file
       entryPoints:
-        - websecure
+        - "websecure"
+      service: "api@internal"
+      middlewares:
+        - "muro-seguro@file"      # Control por IP (Whitelist)
+        - "auth-dashboard@file"   # Control por Usuario (Basic Auth)
       tls:
-        certResolver: letsencrypt
+        certResolver: "letsencrypt"