diff --git a/dmz/internalproxy/templates/authentik.yaml b/dmz/internalproxy/templates/authentik.yaml index 998f5a9..e69de29 100644 --- a/dmz/internalproxy/templates/authentik.yaml +++ b/dmz/internalproxy/templates/authentik.yaml @@ -1,53 +0,0 @@ -apiVersion: traefik.io/v1alpha1 -kind: IngressRoute -metadata: - name: authentik-ingress -spec: - entryPoints: - - websecure - routes: - - match: Host(`test.durp.info`) && PathPrefix(`/`) - kind: Rule - services: - - name: foobar - namespace: traefik - port: 443 - tls: - secretName: authentik-tls - ---- - -apiVersion: v1 -kind: Service -metadata: - name: authentik-server -spec: - type: ExternalName - externalName: authentik.durp.info - ---- - -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: authentik-tls -spec: - issuerRef: - name: letsencrypt-production - kind: ClusterIssuer - secretName: authentik-tls - commonName: "test.durp.info" - dnsNames: - - "test.durp.info" - ---- - -apiVersion: traefik.io/v1alpha1 -kind: Middleware -metadata: - name: example-redirectregex -spec: - redirectRegex: - regex: (.)* - replacement: https://authentik.durp.info/${1} - permanent: false diff --git a/dmz/traefik/templates/traefik-dashboard.yaml b/dmz/traefik/templates/traefik-dashboard.yaml index 052fefb..1ca6993 100644 --- a/dmz/traefik/templates/traefik-dashboard.yaml +++ b/dmz/traefik/templates/traefik-dashboard.yaml @@ -15,6 +15,7 @@ spec: secretName: traefik-tls --- + apiVersion: cert-manager.io/v1 kind: Certificate metadata: @@ -28,3 +29,58 @@ spec: commonName: "traefik.durp.info" dnsNames: - "traefik.durp.info" + +--- + +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: authentik-ingress +spec: + entryPoints: + - websecure + routes: + - match: Host(`test.durp.info`) && PathPrefix(`/`) + kind: Rule + services: + - name: foobar + port: 443 + tls: + secretName: authentik-tls + +--- + +apiVersion: v1 +kind: Service +metadata: + name: authentik-server +spec: + type: ExternalName + externalName: authentik.durp.info + +--- + +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: authentik-tls +spec: + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + secretName: authentik-tls + commonName: "test.durp.info" + dnsNames: + - "test.durp.info" + +--- + +apiVersion: traefik.io/v1alpha1 +kind: Middleware +metadata: + name: example-redirectregex +spec: + redirectRegex: + regex: (.)* + replacement: https://authentik.durp.info/${1} + permanent: false