traefik: add pqdn redirect

hosts/sora/services/traefik.nix

@@ -32,9 +32,18 @@
               trustForwardHeader = true;
             };
           };
+          redirect-flake-sh = {
+            redirectregex = {
+              regex = "^https?://flake\\.sh/(.*)";
+              replacement = "https://notohh.dev/";
+              permanent = false;
+            };
+          };
           redirect-to-https = {
-            redirectscheme.scheme = "https";
+            redirectscheme = {
-            redirectscheme.permanent = true;
+              scheme = "https";
+              permanent = true;
+            };
           };
           cors = {
             headers = {
@@ -62,6 +71,14 @@
             tls.domains = [{main = "*.notohh.dev";}];
             tls.certresolver = "production";
           };
+          flake-sh = {
+            rule = "Host(`${pqdn}`)";
+            entrypoints = ["websecure"];
+            service = "noop@internal";
+            middlewares = "redirect-flake-sh";
+            tls.domains = [{main = "*.${pqdn}";}];
+            tls.certresolver = "production";
+          };
           uptime-kuma = {
             rule = "Host(`status.${pqdn}`)";
             entrypoints = ["websecure"];