forust
a4a4bb4cc5
deploy / validate (push) Skipped
renovate-ci / validate-renovate (push) Skipped
ci / lint-prettier (push) Successful in 3s
ci / lint-ruff (push) Successful in 1s
ci / lint-yaml (push) Successful in 2s
ci / lint-dockerfiles (push) Successful in 1s
ci / validate (push) Successful in 2s
ci / build (push) Skipped
ci / lint-prettier (pull_request) Successful in 3s
ci / lint-ruff (pull_request) Successful in 1s
ci / lint-yaml (pull_request) Successful in 5s
ci / lint-dockerfiles (pull_request) Successful in 1s
ci / validate (pull_request) Successful in 1s
ci / build (pull_request) Skipped
renovate-ci / validate-renovate (pull_request) Successful in 10s
84 lines
2.4 KiB
YAML
84 lines
2.4 KiB
YAML
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: netbird-prod
|
|
namespace: netbird
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`nb.forust.xyz`) && (PathPrefix(`/signalexchange.SignalExchange/`) || PathPrefix(`/management.ManagementService/`) || PathPrefix(`/management.ProxyService/`))
|
|
kind: Rule
|
|
priority: 100
|
|
middlewares:
|
|
- name: crowdsec-bouncer
|
|
namespace: crowdsec
|
|
services:
|
|
- name: netbird-server-service
|
|
port: 80
|
|
scheme: h2c
|
|
- match: Host(`nb.forust.xyz`) && (PathPrefix(`/relay`) || PathPrefix(`/ws-proxy/`) || PathPrefix(`/api`) || PathPrefix(`/oauth2`))
|
|
kind: Rule
|
|
priority: 100
|
|
middlewares:
|
|
- name: crowdsec-bouncer
|
|
namespace: crowdsec
|
|
services:
|
|
- name: netbird-server-service
|
|
port: 80
|
|
- match: Host(`nb.forust.xyz`)
|
|
kind: Rule
|
|
priority: 1
|
|
middlewares:
|
|
- name: crowdsec-bouncer
|
|
namespace: crowdsec
|
|
services:
|
|
- name: netbird-dashboard-service
|
|
port: 80
|
|
tls:
|
|
secretName: netbird-prod-tls
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: netbird-local
|
|
namespace: netbird
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: (Host(`netbird.workstation.internal`) || Host(`netbird.gigaforust.internal`)) && (PathPrefix(`/signalexchange.SignalExchange/`) || PathPrefix(`/management.ManagementService/`) || PathPrefix(`/management.ProxyService/`))
|
|
kind: Rule
|
|
priority: 100
|
|
services:
|
|
- name: netbird-server-service
|
|
port: 80
|
|
scheme: h2c
|
|
- match: (Host(`netbird.workstation.internal`) || Host(`netbird.gigaforust.internal`)) && (PathPrefix(`/relay`) || PathPrefix(`/ws-proxy/`) || PathPrefix(`/api`) || PathPrefix(`/oauth2`))
|
|
kind: Rule
|
|
priority: 100
|
|
services:
|
|
- name: netbird-server-service
|
|
port: 80
|
|
- match: Host(`netbird.workstation.internal`) || Host(`netbird.gigaforust.internal`)
|
|
kind: Rule
|
|
priority: 1
|
|
services:
|
|
- name: netbird-dashboard-service
|
|
port: 80
|
|
tls:
|
|
secretName: internal-wildcard-tls
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRouteUDP
|
|
metadata:
|
|
name: netbird-stun
|
|
namespace: netbird
|
|
spec:
|
|
entryPoints:
|
|
- netbird-stun
|
|
routes:
|
|
- services:
|
|
- name: netbird-server-service
|
|
port: 3478
|