feat(nav): deploy Sun-Panel dashboard at home.961504.xyz:10443 and add Basic Auth to sensitive backends

stacks/gateway/Caddyfile

@@ -8,6 +8,13 @@
     auto_https disable_redirects
 }
 
+# 0. 家庭统一导航总入口 Sun-Panel (https://home.961504.xyz:10443)
+home.961504.xyz:10443, nav.home.961504.xyz:10443 {
+    tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
+    encode zstd gzip
+    reverse_proxy 127.0.0.1:3002
+}
+
 # 1. 极空间 Z4 NAS (https://z4.home.961504.xyz:10443 或 https://nas.home.961504.xyz:10443)
 nas.home.961504.xyz:10443, z4.home.961504.xyz:10443 {
     tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
@@ -15,16 +22,29 @@ nas.home.961504.xyz:10443, z4.home.961504.xyz:10443 {
     reverse_proxy 192.168.31.185:5055
 }
 
-# 2. Lucky 控制台 (https://lucky.home.961504.xyz:10443)
+# 2. 路由器 Mihomo / Clash 面板 (已开启 HTTP Basic Auth 密码锁保护: ixvii0iv / Mac mini密码)
+clash.home.961504.xyz:10443 {
+    tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
+    encode zstd gzip
+    basic_auth {
+        ixvii0iv $2a$14$VaaNvgIjsCJFzXCpIxjcOerKUIdkN7GhVWAlGh3/ZZjBOADY9lg..
+    }
+    reverse_proxy 192.168.31.1:9999
+}
+
+# 3. 小米路由器管理后台 (https://router.home.961504.xyz:10443)
+router.home.961504.xyz:10443 {
+    tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
+    encode zstd gzip
+    basic_auth {
+        ixvii0iv $2a$14$VaaNvgIjsCJFzXCpIxjcOerKUIdkN7GhVWAlGh3/ZZjBOADY9lg..
+    }
+    reverse_proxy 192.168.31.1:80
+}
+
+# 4. Lucky 控制台 (https://lucky.home.961504.xyz:10443)
 lucky.home.961504.xyz:10443 {
     tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
     encode zstd gzip
     reverse_proxy 127.0.0.1:16601
 }
-
-# 3. 路由器 Mihomo / Clash 面板 (https://clash.home.961504.xyz:10443/ui/)
-clash.home.961504.xyz:10443 {
-    tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
-    encode zstd gzip
-    reverse_proxy 192.168.31.1:9999
-}

stacks/sun-panel/docker-compose.yml

@@ -0,0 +1,12 @@
+services:
+  sun-panel:
+    image: hslr/sun-panel:latest
+    container_name: sun-panel
+    restart: always
+    ports:
+      - "3002:3002"
+    volumes:
+      - ./conf:/app/conf
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    environment:
+      - TZ=Asia/Shanghai