Automated Manifest Update (#3068)
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. Reviewed-on: #3068 Co-authored-by: gitea-bot <gitea-bot@alexlebens.net> Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #3068.
This commit is contained in:
@@ -34,65 +34,6 @@ spec:
|
|||||||
hostPID: false
|
hostPID: false
|
||||||
dnsPolicy: ClusterFirst
|
dnsPolicy: ClusterFirst
|
||||||
containers:
|
containers:
|
||||||
- env:
|
|
||||||
- name: VPN_SERVICE_PROVIDER
|
|
||||||
value: protonvpn
|
|
||||||
- name: VPN_TYPE
|
|
||||||
value: wireguard
|
|
||||||
- name: WIREGUARD_PRIVATE_KEY
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
key: private-key
|
|
||||||
name: searxng-wireguard-conf
|
|
||||||
- name: UPDATER_PROTONVPN_EMAIL
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
key: proton-email
|
|
||||||
name: searxng-wireguard-conf
|
|
||||||
- name: UPDATER_PROTONVPN_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
key: proton-password
|
|
||||||
name: searxng-wireguard-conf
|
|
||||||
- name: FIREWALL_OUTBOUND_SUBNETS
|
|
||||||
value: 192.168.1.0/24,10.244.0.0/16
|
|
||||||
- name: FIREWALL_INPUT_PORTS
|
|
||||||
value: "8080"
|
|
||||||
- name: DNS_UPSTREAM_RESOLVER_TYPE
|
|
||||||
value: dot
|
|
||||||
image: ghcr.io/qdm12/gluetun:v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
|
|
||||||
imagePullPolicy: IfNotPresent
|
|
||||||
lifecycle:
|
|
||||||
postStart:
|
|
||||||
exec:
|
|
||||||
command:
|
|
||||||
- /bin/sh
|
|
||||||
- -c
|
|
||||||
- (ip rule del table 51820; ip -6 rule del table 51820) || true
|
|
||||||
livenessProbe:
|
|
||||||
exec:
|
|
||||||
command:
|
|
||||||
- /gluetun-entrypoint
|
|
||||||
- healthcheck
|
|
||||||
failureThreshold: 5
|
|
||||||
initialDelaySeconds: 30
|
|
||||||
periodSeconds: 30
|
|
||||||
successThreshold: 1
|
|
||||||
timeoutSeconds: 15
|
|
||||||
name: gluetun
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
devic.es/tun: "1"
|
|
||||||
requests:
|
|
||||||
cpu: 10m
|
|
||||||
devic.es/tun: "1"
|
|
||||||
memory: 64Mi
|
|
||||||
securityContext:
|
|
||||||
capabilities:
|
|
||||||
add:
|
|
||||||
- NET_ADMIN
|
|
||||||
- SYS_MODULE
|
|
||||||
privileged: true
|
|
||||||
- env:
|
- env:
|
||||||
- name: SEARXNG_BASE_URL
|
- name: SEARXNG_BASE_URL
|
||||||
value: https://searxng.alexlebens.net/
|
value: https://searxng.alexlebens.net/
|
||||||
|
|||||||
@@ -1,35 +0,0 @@
|
|||||||
apiVersion: external-secrets.io/v1
|
|
||||||
kind: ExternalSecret
|
|
||||||
metadata:
|
|
||||||
name: searxng-wireguard-conf
|
|
||||||
namespace: searxng
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: searxng-wireguard-conf
|
|
||||||
app.kubernetes.io/instance: searxng
|
|
||||||
app.kubernetes.io/part-of: searxng
|
|
||||||
spec:
|
|
||||||
secretStoreRef:
|
|
||||||
kind: ClusterSecretStore
|
|
||||||
name: vault
|
|
||||||
data:
|
|
||||||
- secretKey: private-key
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /protonvpn/conf/cl01tl
|
|
||||||
metadataPolicy: None
|
|
||||||
property: private-key
|
|
||||||
- secretKey: proton-email
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /protonvpn/conf/cl01tl
|
|
||||||
metadataPolicy: None
|
|
||||||
property: email
|
|
||||||
- secretKey: proton-password
|
|
||||||
remoteRef:
|
|
||||||
conversionStrategy: Default
|
|
||||||
decodingStrategy: None
|
|
||||||
key: /protonvpn/conf/cl01tl
|
|
||||||
metadataPolicy: None
|
|
||||||
property: password
|
|
||||||
Reference in New Issue
Block a user