2022-01-05 19:30:43 +00:00
|
|
|
ingressClass:
|
|
|
|
|
enabled: true
|
|
|
|
|
isDefaultClass: false
|
|
|
|
|
|
|
|
|
|
providers:
|
|
|
|
|
kubernetesCRD:
|
|
|
|
|
ingressClass: external
|
2021-11-28 10:16:31 +00:00
|
|
|
|
2022-01-11 21:02:12 +00:00
|
|
|
kubernetesIngress:
|
|
|
|
|
labelSelector: environment=external
|
|
|
|
|
namespaces:
|
|
|
|
|
- drone
|
|
|
|
|
- nextcloud
|
|
|
|
|
- gitea
|
2022-01-21 17:08:40 +00:00
|
|
|
- cert-manager
|
2021-11-28 10:16:31 +00:00
|
|
|
|
2022-01-05 19:30:43 +00:00
|
|
|
ports:
|
|
|
|
|
web:
|
2022-01-21 17:08:40 +00:00
|
|
|
# redirectTo: websecure
|
2022-01-05 19:30:43 +00:00
|
|
|
websecure:
|
|
|
|
|
tls:
|
|
|
|
|
enabled: true
|
2021-11-28 10:16:31 +00:00
|
|
|
|
2022-01-11 21:02:12 +00:00
|
|
|
globalArguments: []
|
|
|
|
|
additionalArguments:
|
|
|
|
|
- "--providers.kubernetesingress.ingressclass=ingress-external"
|
|
|
|
|
|
|
|
|
|
ingressRoute:
|
|
|
|
|
dashboard:
|
|
|
|
|
enabled: false
|
|
|
|
|
|
|
|
|
|
tlsOptions:
|
|
|
|
|
default:
|
|
|
|
|
preferServerCipherSuites: true
|
|
|
|
|
minVersion: VersionTLS12
|
|
|
|
|
sniStrict: true
|
|
|
|
|
cipherSuites:
|
|
|
|
|
- TLS_AES_128_GCM_SHA256
|
|
|
|
|
- TLS_AES_256_GCM_SHA384
|
|
|
|
|
- TLS_CHACHA20_POLY1305_SHA256
|
|
|
|
|
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
|
|
|
|
|
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
|
|
|
|
|
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
|
|
|
|
|
|
|
|
|
|
|
2022-01-05 19:30:43 +00:00
|
|
|
service:
|
2021-11-28 10:16:31 +00:00
|
|
|
enabled: true
|
2022-01-05 19:30:43 +00:00
|
|
|
type: LoadBalancer
|
|
|
|
|
annotations:
|
|
|
|
|
metallb.universe.tf/address-pool: external
|
|
|
|
|
|
|
|
|
|
externalIPs:
|
|
|
|
|
- 192.168.1.12
|
|
|
|
|
|
|
|
|
|
logs:
|
|
|
|
|
general:
|
|
|
|
|
level: DEBUG
|
