nold/hive-apps
1
0
Fork 0
mirror of https://github.com/nold360/hive-apps synced 2024-12-22 13:01:21 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update Ingress

Browse source
This commit is contained in:
nold 2022-01-05 20:24:47 +01:00
parent f57e43b28a
commit 5a34fbb1ad
17 changed files with 21 additions and 142 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
projects/arrstack/values/bazarr.yaml
View file

@ -3,6 +3,7 @@ ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- host: bazarr.dc
paths:

1
projects/arrstack/values/jackett.yaml
View file

@ -7,6 +7,7 @@ ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- host: jackett.dc
paths:

1
projects/arrstack/values/lidarr.yaml
View file

@ -3,6 +3,7 @@ ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- host: lidarr.dc
paths:

1
projects/arrstack/values/ombi.yaml
View file

@ -3,6 +3,7 @@ ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- host: ombi.dc
paths:

1
projects/arrstack/values/radarr.yaml
View file

@ -3,6 +3,7 @@ ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- host: radarr.dc
paths:

1
projects/arrstack/values/sonarr.yaml
View file

@ -6,6 +6,7 @@ ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- host: sonarr.dc
paths:

1
projects/core/values/cilium.yaml
View file

@ -9,6 +9,7 @@ hubble:
enabled: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- cilium.dc
tls:

6
projects/core/values/ingress-internal.yaml
View file

@ -4,7 +4,7 @@ ingressClass:
providers:
kubernetesCRD:
ingressClass: internal
ingressClass: traefik
globalArguments: []
@ -23,3 +23,7 @@ service:
externalIPs:
- 192.168.1.11
logs:
general:
level: DEBUG

3
projects/downloader/values/deluge.yaml
View file

@ -3,7 +3,8 @@ ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: "vault-issuer"
kubernetes.io/ingress.class: "nginx"
traefik.ingress.kubernetes.io/router.tls: 'true'
#FIXME:
nginx.ingress.kubernetes.io/proxy-body-size: 50m
hosts:

2
projects/downloader/values/pyload.yaml
View file

@ -3,7 +3,7 @@ ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: "vault-issuer"
kubernetes.io/ingress.class: "nginx"
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- host: pyload.dc
paths:

128
projects/downloader/values/rtorrent.yaml
View file

@ -1,128 +0,0 @@
env:
# -- Set the container timezone
TZ: UTC
# -- Folder where Flood stores it's configuration
HOME: "/config"
# -- The host that Flood should listen for web connections on
FLOOD_OPTION_HOST: "0.0.0.0"
# -- The port that Flood should listen for web connections on
FLOOD_OPTION_PORT: "3000"
# -- ADVANCED: rTorrent daemon managed by Flood
FLOOD_OPTION_RTORRENT: "true"
# -- Allowed path for file operations
FLOOD_OPTION_ALLOWEDPATH: "/downloads"
# -- Configures service settings for the chart.
# @default -- See values.yaml
service:
main:
ports:
http:
port: 3000
bittorrent:
enabled: true
type: ClusterIP
ports:
bittorrent:
enabled: true
port: 6881
protocol: TCP
targetPort: 6881
# -- Minimal configuration provided from https://github.com/jesec/rtorrent/blob/master/doc/rtorrent.rc
# @default -- string
config: |
session.use_lock.set = no
method.insert = cfg.basedir, private|const|string, (cat,(fs.homedir),"/.local/share/rtorrent/")
method.insert = cfg.download, private|const|string, (cat,"/downloads/","download/")
method.insert = cfg.logs, private|const|string, (cat,(cfg.download),"log/")
method.insert = cfg.logfile, private|const|string, (cat,(cfg.logs),"rtorrent-",(system.time),".log")
method.insert = cfg.session, private|const|string, (cat,(cfg.basedir),".session/")
method.insert = cfg.watch, private|const|string, (cat,(cfg.download),"watch/")
fs.mkdir.recursive = (cat,(cfg.basedir))
fs.mkdir = (cat,(cfg.download))
fs.mkdir = (cat,(cfg.logs))
fs.mkdir = (cat,(cfg.session))
fs.mkdir = (cat,(cfg.watch))
fs.mkdir = (cat,(cfg.watch),"/load")
fs.mkdir = (cat,(cfg.watch),"/start")
schedule2 = watch_load, 11, 10, ((load.verbose, (cat, (cfg.watch), "load/*.torrent")))
schedule2 = watch_start, 10, 10, ((load.start_verbose, (cat, (cfg.watch), "start/*.torrent")))
dht.add_bootstrap = dht.transmissionbt.com:6881
dht.add_bootstrap = dht.libtorrent.org:25401
throttle.max_uploads.set = 20
throttle.max_uploads.global.set = 50
throttle.min_peers.normal.set = 20
throttle.max_peers.normal.set = 60
throttle.min_peers.seed.set = 30
throttle.max_peers.seed.set = 80
trackers.numwant.set = 80
network.port_range.set = 61086-61086
network.max_open_files.set = 600
network.max_open_sockets.set = 300
pieces.memory.max.set = 1800M
session.path.set = (cat, (cfg.session))
directory.default.set = (cat, (cfg.download))
log.execute = (cat, (cfg.logs), "execute.log")
encoding.add = utf8
system.daemon.set = true
system.umask.set = 0002
system.cwd.set = (directory.default)
network.http.max_open.set = 500
network.http.dns_cache_timeout.set = 25
network.scgi.open_local = (cat,(cfg.basedir),rtorrent.sock)
print = (cat, "Logging to ", (cfg.logfile))
log.open_file = "log", (cfg.logfile)
log.add_output = "info", "log"
ingress:
main:
enabled: true
annotations:
cert-manager.io/cluster-issuer: "vault-issuer"
kubernetes.io/ingress.class: "nginx"
nginx.ingress.kubernetes.io/proxy-body-size: 50m
hosts:
- host: flood.dc
paths:
- path: /
pathType: Prefix
tls:
- secretName: flood.dc-tls
hosts:
- flood.dc
persistence:
config:
enabled: true
mountPath: /config
size: 10M
# use hostpath instead
downloads:
enabled: true
type: hostPath
hostPath: /data/torrent
mountPath: /downloads
## VPN
addons:
vpn:
enabled: true
openvpn:
authSecret: openvpn
configFileSecret: openvpn
securityContext:
capabilities:
add:
- NET_ADMIN
- SYS_MODULE
livenessProbe:
exec:
command:
- sh
- -c
- if [ $(curl -s https://ipinfo.io/country) == 'NL' ]; then exit 0; else exit $?; fi
initialDelaySeconds: 30
periodSeconds: 60
failureThreshold: 3

10
projects/downloader/values/youtubedl.yaml
View file

@ -3,15 +3,7 @@ ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: "vault-issuer"
kubernetes.io/ingress.class: "nginx"
nginx.ingress.kubernetes.io/auth-url: |
https://youtubedl.dc/akprox/auth/nginx
nginx.ingress.kubernetes.io/auth-signin: |
https://youtubedl.dc/akprox/start?rd=$escaped_request_uri
nginx.ingress.kubernetes.io/auth-response-headers: |
Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
nginx.ingress.kubernetes.io/auth-snippet: |
proxy_set_header X-Forwarded-Host $http_host;
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- host: youtubedl.dc
paths:

2
projects/grafana/values/loki-stack.yaml
View file

@ -17,7 +17,7 @@ grafana:
enabled: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
kubernetes.io/ingress.class: nginx
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- grafana.dc
tls:

1
projects/homeassistant/values/homeassistant.yaml
View file

@ -43,6 +43,7 @@ ingress:
main:
annotations:
cert-manager.io/cluster-issuer: vault-issuer
traefik.ingress.kubernetes.io/router.tls: 'true'
enabled: true
hosts:
- host: hass.dc

1
projects/navidrome/values/navidrome.yaml
View file

@ -49,6 +49,7 @@ ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
traefik.ingress.kubernetes.io/router.tls: 'true'
hosts:
- host: music.dc
paths:

1
projects/services/values/minio.yaml
View file

@ -8,6 +8,7 @@ ingress:
tls: true
annotations:
cert-manager.io/cluster-issuer: vault-issuer
traefik.ingress.kubernetes.io/router.tls: 'true'
networkPolicy:
enabled: true

2
projects/vault/values/vault.yaml
View file

@ -30,7 +30,7 @@ server:
ingress:
annotations:
cert-manager.io/cluster-issuer: vault-issuer
kubernetes.io/ingress.class: nginx
traefik.ingress.kubernetes.io/router.tls: 'true'
enabled: true
extraPaths: []
hosts: