add blocky

clusters/cl01tl/monitoring/kube-prometheus-stack/values.yaml

@@ -83,6 +83,7 @@ kube-prometheus-stack:
         - argo-workflows
         - argocd
         - authentik
+        - blocky
         - cert-manager
         - cloudnative-pg
         - descheduler

clusters/cl01tl/services/blocky/Chart.yaml

@@ -0,0 +1,21 @@
+apiVersion: v2
+name: blocky
+version: 1.0.0
+description: Blocky
+keywords:
+  - blocky
+  - dns
+home: https://wiki.alexlebens.dev/doc/blocky-ZDHt1ucetP
+sources:
+  - https://github.com/0xERR0R/blocky
+  - https://hub.docker.com/r/spx01/blocky
+  - https://github.com/bjw-s/helm-charts/blob/main/charts/other/app-template/values.yaml
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: blocky
+    repository: https://bjw-s.github.io/helm-charts/
+    version: 3.3.2
+icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/blocky.png
+appVersion: v0.24

clusters/cl01tl/services/blocky/values.yaml

@@ -0,0 +1,137 @@
+blocky:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: spx01/blocky
+            tag: v0.24@sha256:9a82e0235c52ef3048586f8006add06e52132adaae70d02f980569dae16421a2
+            pullPolicy: IfNotPresent
+          env:
+            - name: TZ
+              value: US/Central
+          resources:
+            requests:
+              cpu: 100m
+              memory: 128Mi
+  serviceAccount:
+    create: true
+  configMaps:
+    config:
+      enabled: true
+      data:
+        config.yml: |
+          upstreams:
+            init:
+              strategy: fast
+            groups:
+              default:
+                - tcp-tls:1.1.1.1:853
+                - tcp-tls:1.0.0.1:853
+            strategy: parallel_best
+            timeout: 2s
+
+          connectIPVersion: v4
+
+          blocking:
+            denylists:
+              sus:
+                - https://v.firebog.net/hosts/static/w3kbl.txt
+              ads:
+                - https://v.firebog.net/hosts/AdguardDNS.txt
+                - https://v.firebog.net/hosts/Admiral.txt
+                - https://v.firebog.net/hosts/Easylist.txt
+              priv:
+                - https://v.firebog.net/hosts/Easyprivacy.txt
+                - https://v.firebog.net/hosts/Prigent-Ads.txt
+              mal:
+                - https://v.firebog.net/hosts/Prigent-Crypto.txt
+                - https://v.firebog.net/hosts/RPiList-Malware.txt
+                - https://v.firebog.net/hosts/RPiList-Phishing.txt
+            clientGroupsBlock:
+              default:
+                - sus
+                - ads
+                - priv
+                - mal
+            blockType: zeroIp
+            blockTTL: 1m
+            loading:
+              refreshPeriod: 24h
+              downloads:
+                timeout: 60s
+                attempts: 5
+                cooldown: 10s
+              concurrency: 16
+              strategy: fast
+              maxErrorsPerSource: 5
+
+          caching:
+            minTime: 5m
+            maxTime: 30m
+            maxItemsCount: 0
+            prefetching: true
+            prefetchExpires: 2h
+            prefetchThreshold: 5
+            prefetchMaxItemsCount: 0
+            cacheTimeNegative: 30m
+
+          prometheus:
+            enable: true
+            path: /metrics
+
+          queryLog:
+            type: console
+            logRetentionDays: 7
+            creationAttempts: 1
+            creationCooldown: 2s
+            flushInterval: 30s
+
+          minTlsServeVersion: 1.3
+
+          ports:
+            dns: 53
+            http: 4000
+
+          log:
+            level: info
+            format: text
+            timestamp: true
+            privacy: false
+  service:
+    main:
+      controller: main
+      annotations:
+        tailscale.com/expose: "true"
+      ports:
+        tcp:
+          port: 53
+          targetPort: 53
+          protocol: TCP
+        tcp:
+          port: 53
+          targetPort: 53
+          protocol: UDP
+    metrics:
+      controller: main
+      ports:
+        metrics:
+          port: 4000
+          targetPort: 4000
+          protocol: TCP
+  persistence:
+    config:
+      enabled: true
+      type: configMap
+      name: blocky-config
+      advancedMounts:
+        main:
+          main:
+            - path: /app/config.yml
+              readOnly: true
+              mountPropagation: None
+              subPath: config.yml