forust
36922a177c
traefik, gitea, adguard, nextcloud, errorpages, homepages, uptime-kuma, kener, checkmk, headscale, dockmon, metube, downtify, portainer, netronome, userbot Includes Helm values, deployments, services, ingress routes, configmaps, secrets (placeholders), postgres statefulsets, kustomize overlays, and Traefik dynamic configuration.
158 lines
2.9 KiB
YAML
158 lines
2.9 KiB
YAML
# Headscale main
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: headscale-prod
|
|
namespace: headscale
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`hs.forust.xyz`)
|
|
kind: Rule
|
|
services:
|
|
- name: headscale-service
|
|
port: 8080
|
|
tls:
|
|
{}
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: headscale-local
|
|
namespace: headscale
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`hs.workstation.internal`)
|
|
kind: Rule
|
|
services:
|
|
- name: headscale-service
|
|
port: 8080
|
|
tls:
|
|
secretName: local-tls
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: headscale-dev
|
|
namespace: headscale
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`hs.gigaforust.internal`)
|
|
kind: Rule
|
|
services:
|
|
- name: headscale-service
|
|
port: 8080
|
|
tls:
|
|
secretName: local-tls
|
|
---
|
|
# Headscale metrics
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: headscale-metrics-prod
|
|
namespace: headscale
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`hs.forust.xyz`) && PathPrefix(`/metrics`)
|
|
kind: Rule
|
|
services:
|
|
- name: headscale-service
|
|
port: 9090
|
|
tls:
|
|
{}
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: headscale-metrics-local
|
|
namespace: headscale
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`hs.workstation.internal`) && PathPrefix(`/metrics`)
|
|
kind: Rule
|
|
services:
|
|
- name: headscale-service
|
|
port: 9090
|
|
tls:
|
|
secretName: local-tls
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: headscale-metrics-dev
|
|
namespace: headscale
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`hs.gigaforust.internal`) && PathPrefix(`/metrics`)
|
|
kind: Rule
|
|
services:
|
|
- name: headscale-service
|
|
port: 9090
|
|
tls:
|
|
secretName: local-tls
|
|
---
|
|
# Headscale admin UI
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: headscale-admin-prod
|
|
namespace: headscale
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`hs.forust.xyz`) && PathPrefix(`/admin`)
|
|
kind: Rule
|
|
middlewares:
|
|
- name: security-chain@file
|
|
services:
|
|
- name: headscale-admin-service
|
|
port: 80
|
|
tls:
|
|
{}
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: headscale-admin-local
|
|
namespace: headscale
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`hs.workstation.internal`) && PathPrefix(`/admin`)
|
|
kind: Rule
|
|
services:
|
|
- name: headscale-admin-service
|
|
port: 80
|
|
tls:
|
|
secretName: local-tls
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: headscale-admin-dev
|
|
namespace: headscale
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`hs.gigaforust.internal`) && PathPrefix(`/admin`)
|
|
kind: Rule
|
|
services:
|
|
- name: headscale-admin-service
|
|
port: 80
|
|
tls:
|
|
secretName: local-tls
|