feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix

2026-06-08 12:27:55 +02:00
parent 36922a177c
commit e19660fdf4
21 changed files with 145 additions and 121 deletions
@@ -2,6 +2,17 @@

 hostNetwork: true

+securityContext:
+  capabilities:
+    add:
+      - NET_BIND_SERVICE
+
+podSecurityContext: ~
+
+service:
+  spec:
+    type: ClusterIP
+
 api:
  dashboard: true
  insecure: true
@@ -63,6 +74,13 @@ certificatesResolvers:
      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
      httpChallenge:
        entryPoint: web
+  letsencrypt:
+    acme:
+      email: bobrovod@national.shitposting.agency
+      storage: /data/letsencrypt/acme.json
+      caServer: https://acme-v02.api.letsencrypt.org/directory
+      httpChallenge:
+        entryPoint: web

 volumes:
  - name: traefik-dynamic