alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 8 Actions Packages Projects Releases Wiki Activity

change to tailscale ingress

Browse Source
This commit is contained in:
Alex Lebens
2024-08-15 18:38:09 -05:00
parent 0d4230f98b
commit 7b877784d0
17 changed files with 102 additions and 695 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
clusters/cl01tl/applications/homepage-tailscale/Chart.yaml
View File

@@ -1,22 +0,0 @@
apiVersion: v2
name: homepage-tailscale
version: 1.0.0
description: Homepage
keywords:
- homepage
- tailscale
- dashboard
home: https://outline.alexlebens.net/doc/homepage-s2clWoI5EC
sources:
- https://github.com/gethomepage/homepage
- https://github.com/gethomepage/homepage/pkgs/container/homepage
- https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template
maintainers:
- name: alexlebens
dependencies:
- name: app-template
alias: homepage
repository: https://bjw-s.github.io/helm-charts/
version: 3.3.2
icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/homepage.png
appVersion: v0.9.2

19
clusters/cl01tl/applications/homepage-tailscale/templates/cluster-role-binding.yaml
View File

@@ -1,19 +0,0 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: homepage-tailscale
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: homepage-tailscale
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: web
app.kubernetes.io/part-of: {{ .Release.Name }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: homepage-tailscale
subjects:
- kind: ServiceAccount
name: homepage-tailscale
namespace: {{ .Release.Namespace }}

51
clusters/cl01tl/applications/homepage-tailscale/templates/cluster-role.yaml
View File

@@ -1,51 +0,0 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: homepage-tailscale
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: homepage-tailscale
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: web
app.kubernetes.io/part-of: {{ .Release.Name }}
rules:
- apiGroups:
- ""
resources:
- namespaces
- pods
- nodes
verbs:
- get
- list
- apiGroups:
- extensions
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- apiGroups:
- traefik.containo.us
- traefik.io
resources:
- ingressroutes
verbs:
- get
- list
- apiGroups:
- metrics.k8s.io
resources:
- nodes
- pods
verbs:
- get
- list
- apiGroups:
- apiextensions.k8s.io
resources:
- customresourcedefinitions/status
verbs:
- get

93
clusters/cl01tl/applications/homepage-tailscale/templates/external-secret.yaml
View File

@@ -1,93 +0,0 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: homepage-keys-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: homepage-keys-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: web
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: HOMEPAGE_VAR_SYNOLOGY_USER
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /synology/auth
metadataPolicy: None
property: user
- secretKey: HOMEPAGE_VAR_SYNOLOGY_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /synology/auth
metadataPolicy: None
property: password
- secretKey: HOMEPAGE_VAR_UNIFI_USER
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /unifi/auth
metadataPolicy: None
property: user
- secretKey: HOMEPAGE_VAR_UNIFI_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /unifi/auth
metadataPolicy: None
property: password
- secretKey: HOMEPAGE_VAR_SONARR_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/sonarr4/key
metadataPolicy: None
property: key
- secretKey: HOMEPAGE_VAR_SONARR4K_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/sonar4-4k/key
metadataPolicy: None
property: key
- secretKey: HOMEPAGE_VAR_RADARR_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/radarr5/key
metadataPolicy: None
property: key
- secretKey: HOMEPAGE_VAR_RADARR4K_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/radarr5-4k/key
metadataPolicy: None
property: key
- secretKey: HOMEPAGE_VAR_LIDARR2_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/lidarr2/key
metadataPolicy: None
property: key
- secretKey: HOMEPAGE_VAR_READARR_BOOKS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/readarr-books/key
metadataPolicy: None
property: key
- secretKey: HOMEPAGE_VAR_PROWLARR_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/prowlarr/key
metadataPolicy: None
property: key

356
clusters/cl01tl/applications/homepage-tailscale/values.yaml
View File

@@ -1,356 +0,0 @@
homepage:
global:
nameOverride: homepage
controllers:
main:
type: deployment
annotations:
reloader.stakater.com/auto: "true"
strategy: Recreate
containers:
main:
image:
repository: ghcr.io/gethomepage/homepage
tag: v0.9.6
pullPolicy: IfNotPresent
envFrom:
- secretRef:
name: homepage-keys-secret
resources:
requests:
cpu: 100m
memory: 256Mi
serviceAccount:
create: true
name: homepage-tailscale
configMaps:
config:
enabled: true
data:
docker.yaml: ""
kubernetes.yaml: |
mode: cluster
settings.yaml: |
favicon: https://d21zlbwtcn424f.cloudfront.net/icon_white.png
headerStyle: clean
hideVersion: true
color: slate
background:
image: https://d21zlbwtcn424f.cloudfront.net/background.jpg
theme: dark
disableCollapse: true
layout:
- Media:
tab: Applications
icon: mdi-multimedia-#ffffff
- External:
tab: Applications
icon: mdi-application-#ffffff
- Internal:
tab: Applications
icon: mdi-application-#ffffff
- Code:
tab: Tools
icon: mdi-code-braces-box-#ffffff
- Monitoring:
tab: Tools
icon: mdi-chart-bar-#ffffff
- Services:
tab: Services
icon: mdi-server-network-#ffffff
- Hardware:
tab: Services
icon: mdi-lan-connect-#ffffff
- Storage:
tab: Services
icon: mdi-harddisk-#ffffff
- Sonarr:
tab: Servarr
icon: mdi-television-#ffffff
- Radarr:
tab: Servarr
icon: mdi-filmstrip-#ffffff
- Otharr:
tab: Servarr
icon: mdi-music-box-multiple-#ffffff
- Media Services:
tab: Servarr
icon: mdi-radar-#ffffff
- External Services:
tab: Bookmarks
icon: mdi-cloud-#ffffff
- Other Homes:
tab: Bookmarks
icon: mdi-cloud-#ffffff
- Trackers:
tab: Bookmarks
icon: mdi-cloud-#ffffff
widgets.yaml: |
- logo:
icon: https://d21zlbwtcn424f.cloudfront.net/icon_white.png
- kubernetes:
cluster:
show: true
cpu: true
memory: true
showLabel: true
label: "Cluster"
nodes:
show: false
- datetime:
text_size: xl
format:
dateStyle: long
timeStyle: short
hour12: false
- openmeteo:
label: St. Paul
latitude: 44.95
longitude: 93.09
units: metric
cache: 5
services.yaml: |
- Storage:
- Secret Management:
icon: vault.png
description: Vault
href: https://vault-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://vault.vault:8200
statusStyle: dot
- Sonarr:
- Sonarr:
icon: sonarr.png
description: TV Shows
href: https://sonarr-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://sonarr4.sonarr4:80
statusStyle: dot
widget:
type: sonarr
url: http://sonarr4.sonarr4:80
key: {{ "{{HOMEPAGE_VAR_SONARR_KEY}}" }}
fields: ["wanted", "queued", "series"]
enableQueue: false
- Sonarr 4K:
icon: sonarr.png
description: TV Shows 4K
href: https://sonarr-4k-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://sonarr4-4k.sonarr4-4k:80
statusStyle: dot
widget:
type: sonarr
url: http://sonarr4-4k.sonarr4-4k:80
key: {{ "{{HOMEPAGE_VAR_SONARR4K_KEY}}" }}
fields: ["wanted", "queued", "series"]
enableQueue: false
- Radarr:
- Radarr:
icon: radarr.png
description: Movies
href: https://radarr-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://radarr5.radarr5:80
statusStyle: dot
widget:
type: radarr
url: http://radarr5.radarr5:80
key: {{ "{{HOMEPAGE_VAR_RADARR_KEY}}" }}
fields: ["wanted", "queued", "movies"]
enableQueue: false
- Radarr 4K:
icon: radarr.png
description: Movies 4K
href: https://radarr-4k-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://radarr5-4k.radarr5-4k:80
statusStyle: dot
widget:
type: radarr
url: http://radarr5-4k.radarr5-4k:80
key: {{ "{{HOMEPAGE_VAR_RADARR4K_KEY}}" }}
fields: ["wanted", "queued", "movies"]
enableQueue: false
- Otharr:
- Lidarr:
icon: lidarr.png
description: Music
href: https://lidarr-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://lidarr2.lidarr2:80
statusStyle: dot
widget:
type: lidarr
url: http://lidarr2.lidarr2:80
key: {{ "{{HOMEPAGE_VAR_LIDARR2_KEY}}" }}
fields: ["wanted", "queued", "artists"]
- Readarr Books:
icon: readarr.png
description: Books
href: https://readarr-books-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://readarr-books.readarr-books:80
statusStyle: dot
widget:
type: readarr
url: http://readarr-books.readarr-books:80
key: {{ "{{HOMEPAGE_VAR_READARR_BOOKS_KEY}}" }}
fields: ["wanted", "queued", "books"]
enableQueue: false
- Readarr Audiobooks:
icon: readarr.png
description: Audiobooks
href: https://readarr-audiobooks-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://readarr-audiobooks.readarr-audiobooks:80
statusStyle: dot
- Media Services:
- qBittorrent:
icon: qbittorrent.png
description: P2P Downloads
href: https://qbittorrent-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://qbittorrent.qbittorrent:8080
statusStyle: dot
widget:
type: qbittorrent
url: http://qbittorrent.qbittorrent:8080
- Tdarr:
icon: tdarr.png
description: Media transcoding and health checks
href: https://tdarr-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://tdarr-web.tdarr:8265
statusStyle: dot
widget:
type: tdarr
url: http://tdarr-web.tdarr:8265
- Prowlarr:
icon: prowlarr.png
description: Indexers
href: https://prowlarr-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://prowlarr.prowlarr:80
statusStyle: dot
widget:
type: prowlarr
url: http://prowlarr.prowlarr:80
key: {{ "{{HOMEPAGE_VAR_PROWLARR_KEY}}" }}
- Book Bounty:
icon: https://raw.githubusercontent.com/TheWicklowWolf/BookBounty/main/src/static/bookbounty.png
description: Searches for Books
href: https://bookbounty-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://book-bounty.book-bounty:80
statusStyle: dot
- LidaTube:
icon: https://raw.githubusercontent.com/TheWicklowWolf/LidaTube/main/src/static/lidatube.png
description: Searches for Music
href: https://lidatube-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://lidatube.lidatube:80
statusStyle: dot
bookmarks.yaml: |
- External Services:
- Github:
- abbr: GH
href: https://github.com/alexlebens/infrastructure
- Renovate:
- abbr: RN
href: https://developer.mend.io/[platform]/alexlebens/infrastructure
- AWS:
- abbr: AW
href: https://aws.amazon.com/console/
- Cloudflare:
- abbr: CF
href: https://dash.cloudflare.com/b76e303258b84076ee01fd0f515c0768
- Tailscale:
- abbr: TS
href: https://login.tailscale.com/admin/machines
- ProtonVPN:
- abbr: PV
href: https://account.protonvpn.com/
- Unifi:
- abbr: UF
href: https://unifi.ui.com/
- Pushover:
- abbr: PO
href: https://pushover.net
- ReCaptcha:
- abbr: RC
href: https://www.google.com/recaptcha/admin/site/698983587
- Dashboard Icons:
- abbr: DI
href: https://github.com/walkxcode/dashboard-icons/tree/main/png
- Other Homes:
- Home:
- abbr: HM
href: https://home.alexlebens.net
- Dev:
- abbr: DV
href: https://home.alexlebens.dev
- Lebens Home:
- abbr: LH
href: https://www.lebens-home.net
- Trackers:
- Torrentleech:
- abbr: TL
href: https://www.torrentleech.org
- Avistaz:
- abbr: AV
href: https://avistaz.to
- Cinemaz:
- abbr: CM
href: https://cinemaz.to
- Cathode Ray Tube:
- abbr: CRT
href: https://www.cathode-ray.tube
- Alpha Ratio:
- abbr: AL
href: https://alpharatio.cc/
- MV Group:
- abbr: MV
href: https://forums.mvgroup.org
service:
http:
controller: main
ports:
http:
port: 80
targetPort: 3000
protocol: HTTP
ingress:
tailscale:
enabled: true
className: tailscale
hosts:
- host: home-cl01tl
paths:
- path: /
pathType: Prefix
service:
name: homepage-tailscale
port: 80
tls:
- hosts:
- home-cl01tl
persistence:
config:
enabled: true
type: configMap
name: homepage-tailscale-config
advancedMounts:
main:
main:
- path: /app/config/bookmarks.yaml
readOnly: true
mountPropagation: None
subPath: bookmarks.yaml
- path: /app/config/docker.yaml
readOnly: true
mountPropagation: None
subPath: docker.yaml
- path: /app/config/kubernetes.yaml
readOnly: true
mountPropagation: None
subPath: kubernetes.yaml
- path: /app/config/services.yaml
readOnly: true
mountPropagation: None
subPath: services.yaml
- path: /app/config/settings.yaml
readOnly: true
mountPropagation: None
subPath: settings.yaml
- path: /app/config/widgets.yaml
readOnly: true
mountPropagation: None
subPath: widgets.yaml

37
clusters/cl01tl/applications/homepage/templates/ingress-route.yaml
View File

@@ -1,37 +0,0 @@
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: homepage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: homepage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: web
app.kubernetes.io/part-of: {{ .Release.Name }}
annotations:
external-dns.alpha.kubernetes.io/hostname: home.alexlebens.net
external-dns.alpha.kubernetes.io/target: cl01tl-endpoint.alexlebens.net
kubernetes.io/ingress.class: traefik
spec:
entryPoints:
- websecure
routes:
- kind: Rule
match: Host(`home.alexlebens.net`)
middlewares:
- name: "authentik-{{ .Release.Name }}"
namespace: authentik
priority: 10
services:
- kind: Service
name: homepage
port: 80
- kind: Rule
match: Host(`home.alexlebens.net`) && PathPrefix(`/outpost.goauthentik.io/`)
priority: 15
services:
- kind: Service
name: authentik-outpost-proxy
port: 9000
namespace: authentik

27
clusters/cl01tl/applications/homepage/templates/middleware.yaml
View File

@@ -1,27 +0,0 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: "authentik-{{ .Release.Name }}"
namespace: authentik
labels:
app.kubernetes.io/name: "authentik-{{ .Release.Name }}"
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: auth
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
forwardAuth:
address: http://authentik-outpost-proxy.authentik:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version

30
clusters/cl01tl/applications/homepage/values.yaml
View File

@@ -440,10 +440,10 @@ homepage:
href: https://pgadmin.alexlebens.net
siteMonitor: http://pgadmin.pgadmin:80
statusStyle: dot
- Secret Management:
- Secrets:
icon: vault.png
description: Vault
href: https://vault.alexlebens.net
href: https://vault-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://vault.vault:8200
statusStyle: dot
- Object Storage (Outline):
@@ -462,7 +462,7 @@ homepage:
- Sonarr:
icon: sonarr.png
description: TV Shows
href: https://sonarr.alexlebens.net
href: https://sonarr-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://sonarr4.sonarr4:80
statusStyle: dot
widget:
@@ -474,7 +474,7 @@ homepage:
- Sonarr 4K:
icon: sonarr.png
description: TV Shows 4K
href: https://sonarr-4k.alexlebens.net
href: https://sonarr-4k-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://sonarr4-4k.sonarr4-4k:80
statusStyle: dot
widget:
@@ -487,7 +487,7 @@ homepage:
- Radarr:
icon: radarr.png
description: Movies
href: https://radarr.alexlebens.net
href: https://radarr-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://radarr5.radarr5:80
statusStyle: dot
widget:
@@ -499,7 +499,7 @@ homepage:
- Radarr 4K:
icon: radarr.png
description: Movies 4K
href: https://radarr-4k.alexlebens.net
href: https://radarr-4k-cl01tl.boreal-beaufort.ts.net
siteMonitor: http://radarr5-4k.radarr5-4k:80
statusStyle: dot
widget:
@@ -615,9 +615,6 @@ homepage:
- Dev:
- abbr: DV
href: https://home.alexlebens.dev
- Tailscale:
- abbr: TS
href: https://home-cl01tl.boreal-beaufort.ts.net
- Lebens Home:
- abbr: LH
href: https://www.lebens-home.net
@@ -648,6 +645,21 @@ homepage:
port: 80
targetPort: 3000
protocol: HTTP
ingress:
tailscale:
enabled: true
className: tailscale
hosts:
- host: home-cl01tl
paths:
- path: /
pathType: Prefix
service:
name: homepage
port: 80
tls:
- hosts:
- home-cl01tl
persistence:
config:
enabled: true

2
clusters/cl01tl/applications/radarr5-4k/Chart.yaml
View File

@@ -28,4 +28,4 @@ dependencies:
version: 3.8.4
repository: http://alexlebens.github.io/helm-charts
icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/radarr.png
appVersion: 5.7.0.8882
appVersion: 5.8.3.8933

38
clusters/cl01tl/applications/radarr5-4k/values.yaml
View File

@@ -106,25 +106,25 @@ radarr5-4k:
targetPort: 9793
protocol: TCP
ingress:
main:
enabled: true
className: traefik
annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
cert-manager.io/cluster-issuer: letsencrypt-issuer
hosts:
- host: radarr-4k.alexlebens.net
paths:
- path: /
pathType: Prefix
service:
name: radarr5-4k
port: 80
tls:
- secretName: radarr5-4k-secret-tls
hosts:
- radarr-4k.alexlebens.net
# main:
# enabled: true
# className: traefik
# annotations:
# traefik.ingress.kubernetes.io/router.entrypoints: websecure
# traefik.ingress.kubernetes.io/router.tls: "true"
# cert-manager.io/cluster-issuer: letsencrypt-issuer
# hosts:
# - host: radarr-4k.alexlebens.net
# paths:
# - path: /
# pathType: Prefix
# service:
# name: radarr5-4k
# port: 80
# tls:
# - secretName: radarr5-4k-secret-tls
# hosts:
# - radarr-4k.alexlebens.net
tailscale:
enabled: true
className: tailscale

2
clusters/cl01tl/applications/radarr5/Chart.yaml
View File

@@ -27,4 +27,4 @@ dependencies:
version: 3.8.4
repository: http://alexlebens.github.io/helm-charts
icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/radarr.png
appVersion: 5.7.0.8882
appVersion: 5.8.3.8933

38
clusters/cl01tl/applications/radarr5/values.yaml
View File

@@ -106,25 +106,25 @@ radarr5:
targetPort: 9793
protocol: TCP
ingress:
main:
enabled: true
className: traefik
annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
cert-manager.io/cluster-issuer: letsencrypt-issuer
hosts:
- host: radarr.alexlebens.net
paths:
- path: /
pathType: Prefix
service:
name: radarr5
port: 80
tls:
- secretName: radarr5-secret-tls
hosts:
- radarr.alexlebens.net
# main:
# enabled: true
# className: traefik
# annotations:
# traefik.ingress.kubernetes.io/router.entrypoints: websecure
# traefik.ingress.kubernetes.io/router.tls: "true"
# cert-manager.io/cluster-issuer: letsencrypt-issuer
# hosts:
# - host: radarr.alexlebens.net
# paths:
# - path: /
# pathType: Prefix
# service:
# name: radarr5
# port: 80
# tls:
# - secretName: radarr5-secret-tls
# hosts:
# - radarr.alexlebens.net
tailscale:
enabled: true
className: tailscale

2
clusters/cl01tl/applications/sonarr4-4k/Chart.yaml
View File

@@ -29,4 +29,4 @@ dependencies:
version: 3.8.4
repository: http://alexlebens.github.io/helm-charts
icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/sonarr.png
appVersion: 4.0.5.1710
appVersion: 4.0.8.1874

38
clusters/cl01tl/applications/sonarr4-4k/values.yaml
View File

@@ -106,25 +106,25 @@ sonarr4-4k:
targetPort: 9794
protocol: TCP
ingress:
main:
enabled: true
className: traefik
annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
cert-manager.io/cluster-issuer: letsencrypt-issuer
hosts:
- host: sonarr-4k.alexlebens.net
paths:
- path: /
pathType: Prefix
service:
name: sonarr4-4k
port: 80
tls:
- secretName: sonarr4-4k-secret-tls
hosts:
- sonarr-4k.alexlebens.net
# main:
# enabled: true
# className: traefik
# annotations:
# traefik.ingress.kubernetes.io/router.entrypoints: websecure
# traefik.ingress.kubernetes.io/router.tls: "true"
# cert-manager.io/cluster-issuer: letsencrypt-issuer
# hosts:
# - host: sonarr-4k.alexlebens.net
# paths:
# - path: /
# pathType: Prefix
# service:
# name: sonarr4-4k
# port: 80
# tls:
# - secretName: sonarr4-4k-secret-tls
# hosts:
# - sonarr-4k.alexlebens.net
tailscale:
enabled: true
className: tailscale

2
clusters/cl01tl/applications/sonarr4/Chart.yaml
View File

@@ -28,4 +28,4 @@ dependencies:
version: 3.8.4
repository: http://alexlebens.github.io/helm-charts
icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/sonarr.png
appVersion: 4.0.5.1710
appVersion: 4.0.8.1874

38
clusters/cl01tl/applications/sonarr4/values.yaml
View File

@@ -106,25 +106,25 @@ sonarr4:
targetPort: 9794
protocol: TCP
ingress:
main:
enabled: true
className: traefik
annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
cert-manager.io/cluster-issuer: letsencrypt-issuer
hosts:
- host: sonarr.alexlebens.net
paths:
- path: /
pathType: Prefix
service:
name: sonarr4
port: 80
tls:
- secretName: sonarr4-secret-tls
hosts:
- sonarr.alexlebens.net
# main:
# enabled: true
# className: traefik
# annotations:
# traefik.ingress.kubernetes.io/router.entrypoints: websecure
# traefik.ingress.kubernetes.io/router.tls: "true"
# cert-manager.io/cluster-issuer: letsencrypt-issuer
# hosts:
# - host: sonarr.alexlebens.net
# paths:
# - path: /
# pathType: Prefix
# service:
# name: sonarr4
# port: 80
# tls:
# - secretName: sonarr4-secret-tls
# hosts:
# - sonarr.alexlebens.net
tailscale:
enabled: true
className: tailscale

2
clusters/cl01tl/platform/vault/Chart.yaml
View File

@@ -25,4 +25,4 @@ dependencies:
repository: https://bjw-s.github.io/helm-charts/
version: 3.3.2
icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/vault.png
appVersion: 1.17.0
appVersion: 1.17.3