113 lines
2.0 KiB
YAML
113 lines
2.0 KiB
YAML
# Auto-generated by forust | See https://github.com/traefik/traefik-helm-chart/blob/master/values.yaml
|
|
|
|
hostNetwork: true
|
|
|
|
securityContext:
|
|
capabilities:
|
|
add:
|
|
- NET_BIND_SERVICE
|
|
|
|
podSecurityContext: ~
|
|
|
|
service:
|
|
spec:
|
|
type: ClusterIP
|
|
|
|
api:
|
|
dashboard: true
|
|
insecure: true
|
|
|
|
updateStrategy:
|
|
type: Recreate
|
|
|
|
deployment:
|
|
initContainers:
|
|
- name: volume-permissions
|
|
image: busybox:latest
|
|
command:
|
|
- sh
|
|
- -c
|
|
- "mkdir -p /data/letsencrypt && touch /data/letsencrypt/acme.json && chmod 600 /data/letsencrypt/acme.json"
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: /data
|
|
|
|
providers:
|
|
kubernetesIngress:
|
|
enabled: false
|
|
kubernetesCRD:
|
|
enabled: true
|
|
kubernetesGateway:
|
|
enabled: false
|
|
file:
|
|
enabled: false
|
|
|
|
# Entrypoints
|
|
ports:
|
|
web:
|
|
port: 80
|
|
http:
|
|
redirections:
|
|
entryPoint:
|
|
to: websecure
|
|
scheme: https
|
|
permanent: true
|
|
websecure:
|
|
port: 443
|
|
http:
|
|
tls:
|
|
enabled: true
|
|
ssh:
|
|
port: 2221
|
|
exposedPort: 2221
|
|
protocol: TCP
|
|
expose:
|
|
default: true
|
|
dot:
|
|
port: 853
|
|
exposedPort: 853
|
|
protocol: TCP
|
|
expose:
|
|
default: true
|
|
|
|
ingressRoute:
|
|
dashboard:
|
|
enabled: false
|
|
|
|
persistence:
|
|
enabled: true
|
|
size: 100Mi
|
|
path: /data
|
|
|
|
certificatesResolvers:
|
|
letsencrypt-staging:
|
|
acme:
|
|
email: bobrovod@national.shitposting.agency
|
|
storage: /data/letsencrypt/acme.json
|
|
caServer: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
httpChallenge:
|
|
entryPoint: web
|
|
letsencrypt:
|
|
acme:
|
|
email: bobrovod@national.shitposting.agency
|
|
storage: /data/letsencrypt/acme.json
|
|
caServer: https://acme-v02.api.letsencrypt.org/directory
|
|
httpChallenge:
|
|
entryPoint: web
|
|
|
|
volumes:
|
|
- name: traefik-dynamic
|
|
mountPath: /etc/traefik/dynamic
|
|
type: configMap
|
|
|
|
additionalArguments:
|
|
- "--providers.file.directory=/etc/traefik/dynamic"
|
|
- "--providers.file.watch=true"
|
|
|
|
logs:
|
|
general:
|
|
level: INFO
|
|
format: json
|
|
access:
|
|
enabled: true
|