Automated Manifest Update (#3068)
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. Reviewed-on: #3068 Co-authored-by: gitea-bot <gitea-bot@alexlebens.net> Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #3068.
This commit is contained in:
@@ -34,65 +34,6 @@ spec:
|
||||
hostPID: false
|
||||
dnsPolicy: ClusterFirst
|
||||
containers:
|
||||
- env:
|
||||
- name: VPN_SERVICE_PROVIDER
|
||||
value: protonvpn
|
||||
- name: VPN_TYPE
|
||||
value: wireguard
|
||||
- name: WIREGUARD_PRIVATE_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
key: private-key
|
||||
name: searxng-wireguard-conf
|
||||
- name: UPDATER_PROTONVPN_EMAIL
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
key: proton-email
|
||||
name: searxng-wireguard-conf
|
||||
- name: UPDATER_PROTONVPN_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
key: proton-password
|
||||
name: searxng-wireguard-conf
|
||||
- name: FIREWALL_OUTBOUND_SUBNETS
|
||||
value: 192.168.1.0/24,10.244.0.0/16
|
||||
- name: FIREWALL_INPUT_PORTS
|
||||
value: "8080"
|
||||
- name: DNS_UPSTREAM_RESOLVER_TYPE
|
||||
value: dot
|
||||
image: ghcr.io/qdm12/gluetun:v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
|
||||
imagePullPolicy: IfNotPresent
|
||||
lifecycle:
|
||||
postStart:
|
||||
exec:
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- (ip rule del table 51820; ip -6 rule del table 51820) || true
|
||||
livenessProbe:
|
||||
exec:
|
||||
command:
|
||||
- /gluetun-entrypoint
|
||||
- healthcheck
|
||||
failureThreshold: 5
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 15
|
||||
name: gluetun
|
||||
resources:
|
||||
limits:
|
||||
devic.es/tun: "1"
|
||||
requests:
|
||||
cpu: 10m
|
||||
devic.es/tun: "1"
|
||||
memory: 64Mi
|
||||
securityContext:
|
||||
capabilities:
|
||||
add:
|
||||
- NET_ADMIN
|
||||
- SYS_MODULE
|
||||
privileged: true
|
||||
- env:
|
||||
- name: SEARXNG_BASE_URL
|
||||
value: https://searxng.alexlebens.net/
|
||||
|
||||
@@ -1,35 +0,0 @@
|
||||
apiVersion: external-secrets.io/v1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: searxng-wireguard-conf
|
||||
namespace: searxng
|
||||
labels:
|
||||
app.kubernetes.io/name: searxng-wireguard-conf
|
||||
app.kubernetes.io/instance: searxng
|
||||
app.kubernetes.io/part-of: searxng
|
||||
spec:
|
||||
secretStoreRef:
|
||||
kind: ClusterSecretStore
|
||||
name: vault
|
||||
data:
|
||||
- secretKey: private-key
|
||||
remoteRef:
|
||||
conversionStrategy: Default
|
||||
decodingStrategy: None
|
||||
key: /protonvpn/conf/cl01tl
|
||||
metadataPolicy: None
|
||||
property: private-key
|
||||
- secretKey: proton-email
|
||||
remoteRef:
|
||||
conversionStrategy: Default
|
||||
decodingStrategy: None
|
||||
key: /protonvpn/conf/cl01tl
|
||||
metadataPolicy: None
|
||||
property: email
|
||||
- secretKey: proton-password
|
||||
remoteRef:
|
||||
conversionStrategy: Default
|
||||
decodingStrategy: None
|
||||
key: /protonvpn/conf/cl01tl
|
||||
metadataPolicy: None
|
||||
property: password
|
||||
Reference in New Issue
Block a user