forust
c42bf14c9a
ci / lint-prettier (push) Successful in 3s
ci / lint-ruff (push) Successful in 1s
ci / lint-yaml (push) Successful in 1s
ci / lint-dockerfiles (push) Successful in 1s
ci / validate (push) Successful in 1s
ci / build (push) Skipped
ci / deploy-userbot-panel (push) Skipped
adguard.forust.xyz is NXDOMAIN (host retired); the combo SAN cert kept failing and dns.forust.xyz served TRAEFIK DEFAULT CERT. Scope prod route to dns.forust.xyz only. Also commit live traefik-values state (remove letsencrypt-staging resolver, live since helm rev 33).
45 lines
1.2 KiB
YAML
45 lines
1.2 KiB
YAML
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: adguard-prod
|
|
namespace: adguard
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`dns.forust.xyz`)
|
|
kind: Rule
|
|
middlewares:
|
|
- name: crowdsec-bouncer
|
|
namespace: crowdsec
|
|
services:
|
|
- name: adguard-service
|
|
port: 3000
|
|
- match: (Host(`dns.forust.xyz`)) && PathPrefix(`/dns-query`)
|
|
kind: Rule
|
|
services:
|
|
- name: adguard-service
|
|
port: 3000
|
|
tls:
|
|
certResolver: letsencrypt
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: adguard-local
|
|
namespace: adguard
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`adguard.workstation.internal`) || Host(`dns.workstation.internal`) || Host(`adguard.gigaforust.internal`) || Host(`dns.gigaforust.internal`)
|
|
kind: Rule
|
|
services:
|
|
- name: adguard-service
|
|
port: 3000
|
|
- match: (Host(`adguard.workstation.internal`) || Host(`dns.workstation.internal`) || Host(`adguard.gigaforust.internal`) || Host(`dns.gigaforust.internal`)) && PathPrefix(`/dns-query`)
|
|
kind: Rule
|
|
services:
|
|
- name: adguard-service
|
|
port: 3000
|