Fixed stuff, using nginx, configured, uses good cert

This commit is contained in:
Aner Zakobar
2022-05-07 10:36:28 +03:00
parent de5d1f2541
commit 74c6ae9398
10 changed files with 26 additions and 28 deletions
+2 -3
View File
@@ -79,13 +79,12 @@ apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
metadata: metadata:
name: gitea-ingress name: gitea-ingress
annotations:
kubernetes.io/ingress.allow-http: "false"
traefik.ingress.kubernetes.io/router.middlewares: {{ .Release.Namespace }}-redirect@kubernetescrd
spec: spec:
ingressClassName: {{ .Values.homey.ingress_class }}
tls: tls:
- hosts: - hosts:
- git.{{ .Values.homey.url }} - git.{{ .Values.homey.url }}
secretName: {{ .Values.homey.certname }}
rules: rules:
- host: git.{{ .Values.homey.url }} - host: git.{{ .Values.homey.url }}
http: http:
+1 -2
View File
@@ -46,11 +46,10 @@ kind: Ingress
metadata: metadata:
name: jackett-ingress name: jackett-ingress
annotations: annotations:
kubernetes.io/ingress.allow-http: "false"
ingress.kubernetes.io/auth-type: forward ingress.kubernetes.io/auth-type: forward
ingress.kubernetes.io/auth-url: http://ldap-auth.{{ .Release.Namespace }}.svc.cluster.local:80 ingress.kubernetes.io/auth-url: http://ldap-auth.{{ .Release.Namespace }}.svc.cluster.local:80
traefik.ingress.kubernetes.io/router.middlewares: {{ .Release.Namespace }}-redirect@kubernetescrd
spec: spec:
ingressClassName: {{ .Values.homey.ingress_class }}
tls: tls:
- hosts: - hosts:
- jackett.{{ .Values.homey.internal_url }} - jackett.{{ .Values.homey.internal_url }}
+1 -2
View File
@@ -86,9 +86,8 @@ kind: Ingress
metadata: metadata:
name: jellyfin-ingress name: jellyfin-ingress
annotations: annotations:
kubernetes.io/ingress.allow-http: "false"
traefik.ingress.kubernetes.io/router.middlewares: {{ .Release.Namespace }}-redirect@kubernetescrd
spec: spec:
ingressClassName: {{ .Values.homey.ingress_class }}
tls: tls:
- hosts: - hosts:
- jellyfin.{{ .Values.homey.internal_url }} - jellyfin.{{ .Values.homey.internal_url }}
+4
View File
@@ -133,6 +133,10 @@ metadata:
name: nefarious-ingress name: nefarious-ingress
annotations: annotations:
spec: spec:
ingressClassName: {{ .Values.homey.ingress_class }}
tls:
- hosts:
- nefarious.{{ .Values.homey.internal_url }}
rules: rules:
- host: nefarious.{{ .Values.homey.internal_url }} - host: nefarious.{{ .Values.homey.internal_url }}
http: http:
+2 -2
View File
@@ -136,12 +136,12 @@ kind: Ingress
metadata: metadata:
name: nextcloud-ingress name: nextcloud-ingress
annotations: annotations:
kubernetes.io/ingress.allow-http: "false"
traefik.ingress.kubernetes.io/router.middlewares: {{ .Release.Namespace }}-redirect@kubernetescrd
spec: spec:
ingressClassName: {{ .Values.homey.ingress_class }}
tls: tls:
- hosts: - hosts:
- nextcloud.{{ .Values.homey.url }} - nextcloud.{{ .Values.homey.url }}
secretName: {{ .Values.homey.certname }}
rules: rules:
- host: nextcloud.{{ .Values.homey.url }} - host: nextcloud.{{ .Values.homey.url }}
http: http:
+6 -8
View File
@@ -104,15 +104,13 @@ kind: Ingress
metadata: metadata:
name: photoprism-ingress name: photoprism-ingress
annotations: annotations:
kubernetes.io/ingress.allow-http: "false" ingress.kubernetes.io/auth-type: forward
kubernete.io/ingress.classs: traefik ingress.kubernetes.io/auth-url: http://ldap-auth.{{ .Release.Namespace }}.svc.cluster.local:80
ingress.kubernetes.io/auth-type: forward
ingress.kubernetes.io/auth-url: http://ldap-auth.{{ .Release.Namespace }}.svc.cluster.local:80
traefik.ingress.kubernetes.io/frontend-entry-points: http
traefik.ingress.kubernetes.io/buffering: |
maxrequestbodybytes: 31457280
memrequestbodybytes: 62914560
spec: spec:
ingressClassName: {{ .Values.homey.ingress_class }}
tls:
- hosts:
- album.{{ .Values.homey.internal_url }}
rules: rules:
- host: album.{{ .Values.homey.internal_url }} - host: album.{{ .Values.homey.internal_url }}
http: http:
+4 -2
View File
@@ -43,9 +43,11 @@ apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
metadata: metadata:
name: phpldapadmin name: phpldapadmin
annotations:
kubernetes.io/ingress.allow-http: "false"
spec: spec:
ingressClassName: {{ .Values.homey.ingress_class }}
tls:
- hosts:
- ldapadmin.{{ .Values.homey.internal_url }}
rules: rules:
- host: ldapadmin.{{ .Values.homey.internal_url }} - host: ldapadmin.{{ .Values.homey.internal_url }}
http: http:
-8
View File
@@ -1,8 +0,0 @@
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: redirect
spec:
redirectScheme:
scheme: https
permanent: true
+4 -1
View File
@@ -52,10 +52,13 @@ kind: Ingress
metadata: metadata:
name: transmission-ingress name: transmission-ingress
annotations: annotations:
kubernetes.io/ingress.allow-http: "false"
ingress.kubernetes.io/auth-type: forward ingress.kubernetes.io/auth-type: forward
ingress.kubernetes.io/auth-url: http://ldap-auth.{{ .Release.Namespace }}.svc.cluster.local:80 ingress.kubernetes.io/auth-url: http://ldap-auth.{{ .Release.Namespace }}.svc.cluster.local:80
spec: spec:
ingressClassName: {{ .Values.homey.ingress_class }}
tls:
- hosts:
- torrent.{{ .Values.homey.internal_url }}
rules: rules:
- host: torrent.{{ .Values.homey.internal_url }} - host: torrent.{{ .Values.homey.internal_url }}
http: http:
+2
View File
@@ -64,4 +64,6 @@ homey:
url: zakobar.com url: zakobar.com
internal_url: zakobar.home internal_url: zakobar.home
ip: 192.168.1.2 ip: 192.168.1.2
certname: zakobarcert
ingress_class: nginx