alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 4 Actions Activity

feat: use protonvpn
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 27s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 36s
Details
render-manifests / render-manifests (pull_request) Successful in 1m26s
Details

Browse Source
This commit is contained in:
Alex Lebens
2026-04-19 15:42:44 -05:00
parent 9c210bdd05
commit f587bd1e88
2 changed files with 45 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
clusters/cl01tl/helm/slskd/templates/external-secret.yaml
View File

@@ -1,30 +1,66 @@
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: slskd-wireguard-conf name: airvpn-wireguard-conf
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: slskd-wireguard-conf app.kubernetes.io/name: airvpn-wireguard-conf
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
secretStoreRef: secretStoreRef:
kind: ClusterSecretStore kind: ClusterSecretStore
name: vault name: openbao
data: data:
- secretKey: conf
remoteRef:
key: /airvpn/config
property: conf
- secretKey: private-key - secretKey: private-key
remoteRef: remoteRef:
key: /airvpn/conf/cl01tl key: /airvpn/config
property: private-key property: private-key
- secretKey: preshared-key - secretKey: preshared-key
remoteRef: remoteRef:
key: /airvpn/conf/cl01tl key: /airvpn/config
property: preshared-key property: preshared-key
- secretKey: addresses - secretKey: addresses
remoteRef: remoteRef:
key: /airvpn/conf/cl01tl key: /airvpn/config
property: addresses property: addresses
- secretKey: input-ports - secretKey: input-ports
remoteRef: remoteRef:
key: /airvpn/conf/cl01tl key: /airvpn/config
property: input-ports property: input-ports
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: protonvpn-wireguard-conf
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: protonvpn-wireguard-conf
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
data:
- secretKey: conf
remoteRef:
key: /protonvpn/config
property: conf
- secretKey: email
remoteRef:
key: /protonvpn/config
property: email
- secretKey: password
remoteRef:
key: /protonvpn/config
property: password
- secretKey: private-key
remoteRef:
key: /protonvpn/config
property: private-key

19
clusters/cl01tl/helm/slskd/values.yaml
View File

@@ -60,29 +60,14 @@ slskd:
command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"] command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
env: env:
- name: VPN_SERVICE_PROVIDER - name: VPN_SERVICE_PROVIDER
value: airvpn value: protonvpn
- name: VPN_TYPE - name: VPN_TYPE
value: wireguard value: wireguard
- name: WIREGUARD_PRIVATE_KEY - name: WIREGUARD_PRIVATE_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: slskd-wireguard-conf name: protonvpn-wireguard-conf
key: private-key key: private-key
- name: WIREGUARD_PRESHARED_KEY
valueFrom:
secretKeyRef:
name: slskd-wireguard-conf
key: preshared-key
- name: WIREGUARD_ADDRESSES
valueFrom:
secretKeyRef:
name: slskd-wireguard-conf
key: addresses
- name: FIREWALL_VPN_INPUT_PORTS
valueFrom:
secretKeyRef:
name: slskd-wireguard-conf
key: input-ports
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: 192.168.1.0/24,10.244.0.0/16 value: 192.168.1.0/24,10.244.0.0/16
- name: FIREWALL_INPUT_PORTS - name: FIREWALL_INPUT_PORTS