feat(nav): deploy Sun-Panel dashboard at home.961504.xyz:10443 and add Basic Auth to sensitive backends

stacks/gateway/Caddyfile

@@ -8,6 +8,13 @@
     auto_https disable_redirects
 }
 
+# 0. 家庭统一导航总入口 Sun-Panel (https://home.961504.xyz:10443)
+home.961504.xyz:10443, nav.home.961504.xyz:10443 {
+    tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
+    encode zstd gzip
+    reverse_proxy 127.0.0.1:3002
+}
+
 # 1. 极空间 Z4 NAS (https://z4.home.961504.xyz:10443 或 https://nas.home.961504.xyz:10443)
 nas.home.961504.xyz:10443, z4.home.961504.xyz:10443 {
     tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
@@ -15,16 +22,29 @@ nas.home.961504.xyz:10443, z4.home.961504.xyz:10443 {
     reverse_proxy 192.168.31.185:5055
 }
 
-# 2. Lucky 控制台 (https://lucky.home.961504.xyz:10443)
+# 2. 路由器 Mihomo / Clash 面板 (已开启 HTTP Basic Auth 密码锁保护: ixvii0iv / Mac mini密码)
+clash.home.961504.xyz:10443 {
+    tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
+    encode zstd gzip
+    basic_auth {
+        ixvii0iv $2a$14$VaaNvgIjsCJFzXCpIxjcOerKUIdkN7GhVWAlGh3/ZZjBOADY9lg..
+    }
+    reverse_proxy 192.168.31.1:9999
+}
+
+# 3. 小米路由器管理后台 (https://router.home.961504.xyz:10443)
+router.home.961504.xyz:10443 {
+    tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
+    encode zstd gzip
+    basic_auth {
+        ixvii0iv $2a$14$VaaNvgIjsCJFzXCpIxjcOerKUIdkN7GhVWAlGh3/ZZjBOADY9lg..
+    }
+    reverse_proxy 192.168.31.1:80
+}
+
+# 4. Lucky 控制台 (https://lucky.home.961504.xyz:10443)
 lucky.home.961504.xyz:10443 {
     tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
     encode zstd gzip
     reverse_proxy 127.0.0.1:16601
 }
-
-# 3. 路由器 Mihomo / Clash 面板 (https://clash.home.961504.xyz:10443/ui/)
-clash.home.961504.xyz:10443 {
-    tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
-    encode zstd gzip
-    reverse_proxy 192.168.31.1:9999
-}