Files
homelab/traefik/k8s/traefik-values.yaml
forust 92aa731e44
ci / lint-prettier (push) Successful in 18s
ci / lint-ruff (push) Successful in 6s
ci / lint-yaml (push) Successful in 6s
ci / lint-dockerfiles (push) Successful in 5s
ci / validate (push) Successful in 6s
ci / build (push) Successful in 43s
deleted crowdsec stack from the repo. will figure something else
Signed-off-by: mr-forust <vzlomdsisma@gmail.com>
2026-07-19 23:16:14 +02:00

133 lines
3.1 KiB
YAML

# Auto-generated by forust | See https://github.com/traefik/traefik-helm-chart/blob/master/values.yaml
hostNetwork: false
image:
registry: docker.io/library
repository: traefik
tag: v3.7.6
securityContext:
capabilities:
add:
- NET_BIND_SERVICE
podSecurityContext: ~
service:
enabled: true
type: LoadBalancer
annotations:
metallb.io/loadBalancerIPs: "192.168.80.2"
spec:
externalTrafficPolicy: Local
api:
dashboard: true
insecure: true
updateStrategy:
type: Recreate
deployment:
enabled: true
providers:
kubernetesIngress:
enabled: false
kubernetesCRD:
enabled: true
kubernetesGateway:
enabled: false
file:
enabled: false
# Entrypoints
ports:
web:
port: 80
http:
redirections:
entryPoint:
to: websecure
scheme: https
permanent: true
websecure:
port: 443
http:
tls:
enabled: true
ssh:
port: 2221
exposedPort: 2221
protocol: TCP
expose:
default: true
minecraft-tcp:
port: 25565
exposedPort: 25565
protocol: TCP
expose:
default: true
minecraft-udp:
port: 19132
exposedPort: 19132
protocol: UDP
expose:
default: true
metrics:
port: 9100
exposedPort: 9100
protocol: TCP
expose:
default: false
metrics:
prometheus:
enabled: true
entryPoint: metrics
serviceMonitor:
enabled: true
additionalLabels:
release: prometheus-stack
namespace: prometheus
ingressRoute:
dashboard:
enabled: false
persistence:
enabled: true
size: 100Mi
path: /data
certificatesResolvers:
letsencrypt-staging:
acme:
email: bobrovod@national.shitposting.agency
storage: /data/letsencrypt/acme.json
caServer: https://acme-staging-v02.api.letsencrypt.org/directory
httpChallenge:
entryPoint: web
letsencrypt:
acme:
email: bobrovod@national.shitposting.agency
storage: /data/letsencrypt/acme.json
caServer: https://acme-v02.api.letsencrypt.org/directory
httpChallenge:
entryPoint: web
volumes:
- name: traefik-dynamic
mountPath: /etc/traefik/dynamic
type: configMap
additionalArguments:
- "--providers.file.directory=/etc/traefik/dynamic"
- "--providers.file.watch=true"
- "--providers.kubernetesCRD.allowCrossNamespace=true"
- "--entryPoints.websecure.forwardedHeaders.trustedIPs=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22,192.168.1.1,192.168.1.0/24,192.168.88.0/24,192.168.88.1"
- "--entryPoints.web.forwardedHeaders.trustedIPs=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22,192.168.1.1,192.168.1.0/24,192.168.88.0/24,192.168.88.1"
log:
level: INFO
accessLog:
enabled: true
format: common