diff --git a/whoogle/templates/ingress.yaml b/whoogle/templates/ingress.yaml index a38227d..aa4db74 100644 --- a/whoogle/templates/ingress.yaml +++ b/whoogle/templates/ingress.yaml @@ -1,49 +1,81 @@ -apiVersion: networking.k8s.io/v1 -kind: Ingress +#apiVersion: networking.k8s.io/v1 +#kind: Ingress +#metadata: +# name: whoogle +# annotations: +# kubernetes.io/ingress.class: nginx +# nginx.ingress.kubernetes.io/proxy-body-size: "0" +# cert-manager.io/cluster-issuer: letsencrypt-production +# # nginx.ingress.kubernetes.io/auth-url: |- +# # http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx +# # nginx.ingress.kubernetes.io/auth-signin: |- +# # https://whoogle.durp.info/outpost.goauthentik.io/start?rd=$escaped_request_uri +# # nginx.ingress.kubernetes.io/auth-response-headers: |- +# # Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid +# # nginx.ingress.kubernetes.io/auth-snippet: | +# # proxy_set_header X-Forwarded-Host $http_host; +#spec: +# rules: +# - host: whoogle.durp.info +# http: +# paths: +# - path: / +# pathType: Prefix +# backend: +# service: +# name: whoogle +# port: +# number: 5000 +# - path: /outpost.goauthentik.io +# pathType: Prefix +# backend: +# service: +# name: ak-outpost-authentik-embedded-outpost +# port: +# number: 9000 +# tls: +# - hosts: +# - whoogle.durp.info +# secretName: whoogle-tls +# +#--- +# +#kind: Service +#apiVersion: v1 +#metadata: +# name: ak-outpost-authentik-embedded-outpost +#spec: +# type: ExternalName +# externalName: ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local + + +apiVersion: traefik.containo.us/v1alpha1 +kind: IngressRoute metadata: - name: whoogle - annotations: - kubernetes.io/ingress.class: nginx - nginx.ingress.kubernetes.io/proxy-body-size: "0" - cert-manager.io/cluster-issuer: letsencrypt-production - # nginx.ingress.kubernetes.io/auth-url: |- - # http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx - # nginx.ingress.kubernetes.io/auth-signin: |- - # https://whoogle.durp.info/outpost.goauthentik.io/start?rd=$escaped_request_uri - # nginx.ingress.kubernetes.io/auth-response-headers: |- - # Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid - # nginx.ingress.kubernetes.io/auth-snippet: | - # proxy_set_header X-Forwarded-Host $http_host; + name: whoogle-ingress spec: - rules: - - host: whoogle.durp.info - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: whoogle - port: - number: 5000 - - path: /outpost.goauthentik.io - pathType: Prefix - backend: - service: - name: ak-outpost-authentik-embedded-outpost - port: - number: 9000 + entryPoints: + - websecure + routes: + - match: Host(`whoogle.durp.info`) && PathPrefix(`/`) + kind: Rule + services: + - name: whoogle + port: 5000 tls: - - hosts: - - whoogle.durp.info - secretName: whoogle-tls + secretName: whoogle-tls --- -kind: Service -apiVersion: v1 +apiVersion: cert-manager.io/v1 +kind: Certificate metadata: - name: ak-outpost-authentik-embedded-outpost + name: whoogle-tls spec: - type: ExternalName - externalName: ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local + secretName: whoogle-tls + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + commonName: "whoogle.durp.info" + dnsNames: + - "whoogle.durp.info" \ No newline at end of file