update

Merge branch 'mr-prd' into 'prd'
Mr prd See merge request developerdurp/homelab!2
2024-07-21 09:49:15 -05:00 · 2024-07-21 12:58:33 +00:00 · 2024-07-21 12:58:33 +00:00 · 2024-07-21 07:41:04 -05:00 · 2024-07-21 07:39:08 -05:00 · 2024-07-21 07:33:18 -05:00
49 changed files with 139 additions and 148 deletions
--- a/argocd/templates/InternalProxy.yaml
+++ b/argocd/templates/InternalProxy.yaml
@@ -1,23 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: internalproxy
-  namespace: argocd
-spec:
-  project: default
-  source:
-    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
-    path: internalproxy
-    directory:
-      recurse: true
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: internalproxy
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true  
-    syncOptions:
-      - CreateNamespace=true   
-
--- a/argocd/templates/argocd.yaml
+++ b/argocd/templates/argocd.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: argocd
  destination:
    namespace: argocd
--- a/argocd/templates/authentik.yaml
+++ b/argocd/templates/authentik.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: authentik
  destination:
    namespace: authentik
--- a/argocd/templates/bitwarden.yaml
+++ b/argocd/templates/bitwarden.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: bitwarden
    directory:
      recurse: true
--- a/argocd/templates/cert-manager.yaml
+++ b/argocd/templates/cert-manager.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: cert-manager
  destination:
    namespace: cert-manager
--- a/argocd/templates/crossplane.yml
+++ b/argocd/templates/crossplane.yml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: crossplane
  destination:
    namespace: crossplane
--- a/argocd/templates/durpapi.yaml
+++ b/argocd/templates/durpapi.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: durpapi
  destination:
    namespace: durpapi
--- a/argocd/templates/durpot.yaml
+++ b/argocd/templates/durpot.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: durpot
  destination:
    namespace: durpot
--- a/argocd/templates/external-dns.yaml
+++ b/argocd/templates/external-dns.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: external-dns
  destination:
    namespace: external-dns
--- a/argocd/templates/external-secrets.yaml
+++ b/argocd/templates/external-secrets.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: external-secrets
  destination:
    namespace: external-secrets
--- a/argocd/templates/gatekeeper.yaml
+++ b/argocd/templates/gatekeeper.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: gatekeeper
  destination:
    namespace: gatekeeper
--- a/argocd/templates/gitlab-runner.yaml
+++ b/argocd/templates/gitlab-runner.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: gitlab-runner
  destination:
    namespace: gitlab-runner
--- a/argocd/templates/heimdall.yaml
+++ b/argocd/templates/heimdall.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: heimdall
  destination:
    namespace: heimdall
--- a/argocd/templates/ingress.yaml
+++ b/argocd/templates/ingress.yaml
@@ -8,7 +8,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`argocd.internal.dev.durp.info`)
+  - match: Host(`argocd.internal.prd.durp.info`)
    middlewares:
    - name: internal-only
      namespace: traefik  
@@ -31,6 +31,6 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "argocd.internal.dev.durp.info"
+  commonName: "argocd.internal.prd.durp.info"
  dnsNames:
-  - "argocd.internal.dev.durp.info"  
+  - "argocd.internal.prd.durp.info"  
--- a/argocd/templates/krakend.yaml
+++ b/argocd/templates/krakend.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: krakend
  destination:
    namespace: krakend
--- a/argocd/templates/kube-prometheus-stack.yaml
+++ b/argocd/templates/kube-prometheus-stack.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: kube-prometheus-stack
  destination:
    namespace: kube-prometheus-stack
--- a/argocd/templates/kubeclarity.yaml
+++ b/argocd/templates/kubeclarity.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: kubeclarity
  destination:
    namespace: kubeclarity
--- a/argocd/templates/littlelink.yaml
+++ b/argocd/templates/littlelink.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: littlelink
    directory:
      recurse: true
--- a/argocd/templates/longhorn.yaml
+++ b/argocd/templates/longhorn.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: longhorn
  destination:
    namespace: longhorn-system
--- a/argocd/templates/metallb-system.yaml
+++ b/argocd/templates/metallb-system.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: metallb-system
  destination:
    namespace: metallb-system
--- a/argocd/templates/nfs-client.yaml
+++ b/argocd/templates/nfs-client.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: nfs-client
    directory:
      recurse: true
--- a/argocd/templates/open-webui.yaml
+++ b/argocd/templates/open-webui.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: open-webui
  destination:
    namespace: open-webui
--- a/argocd/templates/traefik.yaml
+++ b/argocd/templates/traefik.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: traefik
  destination:
    namespace: traefik
--- a/argocd/templates/uptimekuma.yaml
+++ b/argocd/templates/uptimekuma.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: uptimekuma
    directory:
      recurse: true
--- a/argocd/templates/vault.yaml
+++ b/argocd/templates/vault.yaml
@@ -7,7 +7,7 @@ spec:
  project: default
  source:
    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
    path: vault
  destination:
    namespace: vault
--- a/argocd/values.yaml
+++ b/argocd/values.yaml
@@ -1,10 +1,28 @@
 argo-cd:
+
  global:
    revisionHistoryLimit: 1
    image:
      repository: registry.internal.durp.info/argoproj/argocd
      imagePullPolicy: Always

+  server:
+    #extraArgs:
+    #  - --dex-server-plaintext
+    #  - --dex-server=argocd-dex-server:5556
+    # oidc.config: |
+    #   name: AzureAD
+    #   issuer: https://login.microsoftonline.com/TENANT_ID/v2.0
+    #   clientID: CLIENT_ID
+    #   clientSecret: $oidc.azuread.clientSecret
+    #   requestedIDTokenClaims:
+    #     groups:
+    #       essential: true
+    #   requestedScopes:
+    #     - openid
+    #     - profile
+    #     - email
+
  dex:
    enabled: true
    image:
@@ -15,12 +33,12 @@ argo-cd:
    cm:
      create: true
      annotations: {}
-      url: https://argocd.dev.durp.info
+      url: https://argocd.internal.prd.durp.info
      oidc.tls.insecure.skip.verify: "true"
      dex.config: |
        connectors:
          - config:
-              issuer: https://authentik.dev.durp.info/application/o/argocd/
+              issuer: https://authentik.prd.durp.info/application/o/argocd/
              clientID: lKuMgyYaOlQMNAUSjsRVYgkwZG9UT6CeFWeTLAcl
              clientSecret: $client-secret:clientSecret
              insecureEnableGroups: true
@@ -36,9 +54,9 @@ argo-cd:
    rbac:
      create: true
      policy.csv: |
-        g, ArgoCD Admins, role:admin
+        g, ArgoCD Admins, role:admin 
      scopes: "[groups]"

  server:
-    route:
+    route: 
      enabled: false
--- a/authentik/templates/ingress.yaml
+++ b/authentik/templates/ingress.yaml
@@ -6,7 +6,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`authentik.dev.durp.info`) && PathPrefix(`/`) 
+  - match: Host(`authentik.prd.durp.info`) && PathPrefix(`/`) 
    kind: Rule
    services:
    - name: authentik-server
@@ -25,9 +25,9 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "authentik.dev.durp.info"
+  commonName: "authentik.prd.durp.info"
  dnsNames:
-  - "authentik.dev.durp.info" 
+  - "authentik.prd.durp.info" 

 ---

@@ -36,7 +36,7 @@ apiVersion: v1
 metadata:
  name: authentik-external-dns
  annotations:
-    external-dns.alpha.kubernetes.io/hostname: authentik.durp.info
+    external-dns.alpha.kubernetes.io/hostname: authentik.prd.durp.info
 spec:
  type: ExternalName
-  externalName: durp.info
+  externalName:.prd.durp.info
--- a/bitwarden/templates/ingress.yaml
+++ b/bitwarden/templates/ingress.yaml
@@ -6,7 +6,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`bitwarden.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`bitwarden.prd.durp.info`) && PathPrefix(`/`)
    kind: Rule
    services:
    - name: bitwarden
@@ -25,9 +25,9 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "bitwarden.dev.durp.info"
+  commonName: "bitwarden.prd.durp.info"
  dnsNames:
-  - "bitwarden.dev.durp.info"  
+  - "bitwarden.prd.durp.info"  

 ---

@@ -36,10 +36,10 @@ apiVersion: v1
 metadata:
  name: bitwarden-external-dns
  annotations:
-    external-dns.alpha.kubernetes.io/hostname: bitwarden.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: bitwarden.prd.durp.info
 spec:
  type: ExternalName
-  externalName: dev.durp.info
+  externalName:.prd.durp.info

 ---

@@ -51,7 +51,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`bitwarden.dev.durp.info`) && PathPrefix(`/admin`)
+  - match: Host(`bitwarden.prd.durp.info`) && PathPrefix(`/admin`)
    kind: Rule
    middlewares:
    - name: whitelist
--- a/durpapi/Chart.yaml
+++ b/durpapi/Chart.yaml
@@ -1,11 +1,11 @@
+description: A Helm chart for Kubernetes
+name: durpapi
+appVersion: 0.1.0
+dependencies:
+- condition: postgresql.enabled
+  name: postgresql
+  version: 12.5.*
+  repository: https://charts.bitnami.com/bitnami
+version: 0.1.0-dev0184
 apiVersion: v2
 type: application
-version: 0.1.0-dev0192
-description: A Helm chart for Kubernetes
-appVersion: 0.1.0
-name: durpapi
-dependencies:
- version: 12.5.*
-  condition: postgresql.enabled
-  repository: https://charts.bitnami.com/bitnami
-  name: postgresql
--- a/durpapi/templates/ingress.yaml
+++ b/durpapi/templates/ingress.yaml
@@ -6,7 +6,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host("api.dev.durp.info") && PathPrefix(`/api`)
+  - match: Host("api.prd.durp.info") && PathPrefix(`/api`)
    kind: Rule
    middlewares:
      - name: jwt
@@ -24,7 +24,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host("api.dev.durp.info") && PathPrefix(`/swagger`)
+  - match: Host("api.prd.durp.info") && PathPrefix(`/swagger`)
    kind: Rule
    services:
    - name: "durpapi-service"
@@ -41,5 +41,4 @@ spec:
    jwt:
      Required: true
      Keys:
-        - https://authentik.durp.info/application/o/api/jwks
-
+        - https://authentik.prd.durp.info/application/o/api/jwks/
--- a/external-dns/values.yaml
+++ b/external-dns/values.yaml
@@ -4,10 +4,10 @@ external-dns:

  image:
    pullPolicy: Always
-  txtPrefix: "dev-"
+  txtPrefix: "prd-"
  sources:
    - service
-    
+
  provider: cloudflare
  cloudflare:
    secretName : "external-dns"
--- a/heimdall/templates/ingress.yaml
+++ b/heimdall/templates/ingress.yaml
@@ -7,7 +7,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`heimdall.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`heimdall.prd.durp.info`) && PathPrefix(`/`)
    middlewares:
    - name: authentik-proxy-provider
      namespace: traefik  
@@ -15,7 +15,7 @@ spec:
    services:
    - name: heimdall
      port: 80
-  - match: Host(`heimdall.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
+  - match: Host(`heimdall.prd.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
    kind: Rule
    services:
    - name: ak-outpost-authentik-embedded-outpost
@@ -35,9 +35,9 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "heimdall.dev.durp.info"
+  commonName: "heimdall.prd.durp.info"
  dnsNames:
-  - "heimdall.dev.durp.info"  
+  - "heimdall.prd.durp.info"  

 ---

@@ -46,7 +46,7 @@ apiVersion: v1
 metadata:
  name: heimdall-external-dns
  annotations:
-    external-dns.alpha.kubernetes.io/hostname: heimdall.durp.info
+    external-dns.alpha.kubernetes.io/hostname: heimdall.prd.durp.info
 spec:
  type: ExternalName
-  externalName: durp.info
+  externalName:.prd.durp.info
--- a/internalproxy/Chart.yaml
+++ b/internalproxy/Chart.yaml
@@ -1,7 +0,0 @@
-apiVersion: v2
-name: internalproxy
-description: A Helm chart for Kubernetes
-type: application
-
-version: 0.1.0
-appVersion: "0.1.0"
--- a/krakend/templates/ingress.yaml
+++ b/krakend/templates/ingress.yaml
@@ -7,9 +7,9 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "api.dev.durp.info"
+  commonName: "api.prd.durp.info"
  dnsNames:
-  - "api.dev.durp.info"        
+  - "api.prd.durp.info"        

 ---

@@ -21,7 +21,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-    - match: Host(`api.dev.durp.info`) && PathPrefix(`/`)
+    - match: Host(`api.prd.durp.info`) && PathPrefix(`/`)
      kind: Rule
      services:
        - name: krakend-service
@@ -37,10 +37,10 @@ apiVersion: v1
 metadata:
  name: api-external-dns
  annotations:
-    external-dns.alpha.kubernetes.io/hostname: api.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: api.prd.durp.info
 spec:
  type: ExternalName
-  externalName: dev.durp.info
+  externalName:.prd.durp.info

 ---

@@ -49,7 +49,7 @@ apiVersion: v1
 metadata:
  name: api-developer-dns
  annotations:
-    external-dns.alpha.kubernetes.io/hostname: developer.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: developer.prd.durp.info
    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
  type: ExternalName
--- a/kube-prometheus-stack/templates/ingress.yaml
+++ b/kube-prometheus-stack/templates/ingress.yaml
@@ -6,7 +6,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`grafana.dev.durp.info`) && PathPrefix(`/`) 
+  - match: Host(`grafana.prd.durp.info`) && PathPrefix(`/`) 
    kind: Rule
    services:
    - name: grafana
@@ -25,9 +25,9 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "grafana.dev.durp.info"
+  commonName: "grafana.prd.durp.info"
  dnsNames:
-  - "grafana.dev.durp.info"  
+  - "grafana.prd.durp.info"  

 ---

@@ -39,7 +39,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`alertmanager.dev.durp.info`) && PathPrefix(`/`) 
+  - match: Host(`alertmanager.prd.durp.info`) && PathPrefix(`/`) 
    middlewares:
    - name: whitelist
      namespace: traefik
@@ -63,9 +63,9 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "alertmanager.dev.durp.info"
+  commonName: "alertmanager.prd.durp.info"
  dnsNames:
-  - "alertmanager.dev.durp.info"  
+  - "alertmanager.prd.durp.info"  

 ---

@@ -74,7 +74,7 @@ apiVersion: v1
 metadata:
  name: grafana-external-dns
  annotations:
-    external-dns.alpha.kubernetes.io/hostname: grafana.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: grafana.prd.durp.info
 spec:
  type: ExternalName
-  externalName: dev.durp.info  
+  externalName:.prd.durp.info  
--- a/kubeclarity/templates/ingress.yaml
+++ b/kubeclarity/templates/ingress.yaml
@@ -6,7 +6,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`kubeclarity.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`kubeclarity.prd.durp.info`) && PathPrefix(`/`)
    middlewares:
    - name: whitelist
      namespace: traefik
@@ -30,9 +30,9 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "kubeclarity.dev.durp.info"
+  commonName: "kubeclarity.prd.durp.info"
  dnsNames:
-  - "kubeclarity.dev.durp.info"  
+  - "kubeclarity.prd.durp.info"  

 ---

@@ -41,7 +41,7 @@ apiVersion: v1
 metadata:
  name: kubeclarity-external-dns
  annotations:
-    external-dns.alpha.kubernetes.io/hostname: kubeclarity.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: kubeclarity.prd.durp.info
 spec:
  type: ExternalName
-  externalName: dev.durp.info
+  externalName:.prd.durp.info
--- a/littlelink/templates/ingress.yaml
+++ b/littlelink/templates/ingress.yaml
@@ -6,7 +6,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`links.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`links.prd.durp.info`) && PathPrefix(`/`)
    kind: Rule
    services:
    - name: littlelink
@@ -25,9 +25,9 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "links.dev.durp.info"
+  commonName: "links.prd.durp.info"
  dnsNames:
-  - "links.dev.durp.info"  
+  - "links.prd.durp.info"  

 ---

@@ -36,8 +36,7 @@ apiVersion: v1
 metadata:
  name: links-external-dns
  annotations:
-    external-dns.alpha.kubernetes.io/hostname: links.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: links.prd.durp.info
 spec:
  type: ExternalName
-  externalName: dev.durp.info
-
+  externalName:.prd.durp.info
--- a/longhorn/Chart.yaml
+++ b/longhorn/Chart.yaml
@@ -9,4 +9,4 @@ appVersion: "1.16.0"
 dependencies:
 - name: longhorn
  repository: https://charts.longhorn.io
-  version: 1.7.0
+  version: 1.6.1
--- a/longhorn/templates/ingress.yaml
+++ b/longhorn/templates/ingress.yaml
@@ -6,7 +6,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`longhorn.internal.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`longhorn.internal.prd.durp.info`) && PathPrefix(`/`)
    middlewares:
    - name: whitelist
      namespace: traefik
@@ -16,7 +16,7 @@ spec:
    services:
    - name: longhorn-frontend
      port: 80
-  - match: Host(`longhorn.internal.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
+  - match: Host(`longhorn.internal.prd.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
    kind: Rule
    services:
    - name: ak-outpost-authentik-embedded-outpost
@@ -36,6 +36,6 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "longhorn.internal.dev.durp.info"
+  commonName: "longhorn.internal.prd.durp.info"
  dnsNames:
-  - "longhorn.internal.dev.durp.info"  
+  - "longhorn.internal.prd.durp.info"  
--- a/longhorn/templates/secrets.yaml
+++ b/longhorn/templates/secrets.yaml
@@ -8,7 +8,7 @@ spec:
    name: vault
    kind: ClusterSecretStore
  target:
-    name: longhorn-backup-token-secret2
+    name: longhorn-backup-token-secret
  data:
  - secretKey: AWS_ACCESS_KEY_ID
    remoteRef:
--- a/longhorn/values.yaml
+++ b/longhorn/values.yaml
@@ -76,8 +76,8 @@ longhorn:
    snapshotterReplicaCount: ~
  
  defaultSettings:
-    backupTarget: S3://longhorn-dev@us-east-1/
-    backupTargetCredentialSecret: longhorn-backup-token-secret2
+    backupTarget: S3://longhorn-prd@us-east-1/
+    backupTargetCredentialSecret: longhorn-backup-token-secret
    allowRecurringJobWhileVolumeDetached: ~
    createDefaultDiskLabeledNodes: ~
    defaultDataPath: ~
--- a/metallb-system/templates/config.yaml
+++ b/metallb-system/templates/config.yaml
@@ -4,12 +4,12 @@ metadata:
  name: cheap
 spec:
  addresses:
-    - 192.168.10.110-192.168.10.120
+    - 192.168.11.130-192.168.11.140
 ---
 apiVersion: metallb.io/v1beta1
 kind: L2Advertisement
 metadata:
-  name: pool
+  name: poop
  namespace: metallb-system
 spec:
  ipAddressPools:
--- a/open-webui/templates/ingress.yaml
+++ b/open-webui/templates/ingress.yaml
@@ -6,7 +6,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`open-webui.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`open-webui.prd.durp.info`) && PathPrefix(`/`)
    kind: Rule
    services:
    - name: open-webui
@@ -25,9 +25,9 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "open-webui.dev.durp.info"
+  commonName: "open-webui.prd.durp.info"
  dnsNames:
-  - "open-webui.dev.durp.info"  
+  - "open-webui.prd.durp.info"  

 ---

@@ -36,7 +36,7 @@ apiVersion: v1
 metadata:
  name: open-webui-external-dns
  annotations:
-    external-dns.alpha.kubernetes.io/hostname: open-webui.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: open-webui.prd.durp.info
 spec:
  type: ExternalName
-  externalName: dev.durp.info
+  externalName: prd.durp.info
--- a/traefik/templates/ingress.yaml
+++ b/traefik/templates/ingress.yaml
@@ -6,7 +6,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`traefik.internal.dev.durp.info`)
+  - match: Host(`traefik.internal.prd.durp.info`)
    middlewares:
    - name: authentik-proxy-provider
      namespace: traefik    
@@ -14,7 +14,7 @@ spec:
    services:
    - name: api@internal
      kind: TraefikService
-  - match: Host(`traefik.internal.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
+  - match: Host(`traefik.internal.prd.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
    kind: Rule
    services:
    - name: ak-outpost-authentik-embedded-outpost
@@ -34,6 +34,6 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "traefik.internal.dev.durp.info"
+  commonName: "traefik.internal.prd.durp.info"
  dnsNames:
-  - "traefik.internal.dev.durp.info"
+  - "traefik.internal.prd.durp.info"
--- a/traefik/templates/middleware-chain.yaml
+++ b/traefik/templates/middleware-chain.yaml
@@ -5,4 +5,5 @@ metadata:
 spec:
  chain:
    middlewares:
+    - name: traefik-real-ip
    - name: whitelist
--- a/traefik/templates/middlewares.yaml
+++ b/traefik/templates/middlewares.yaml
@@ -20,6 +20,7 @@ spec:
      - X-authentik-meta-app
      - X-authentik-meta-version

+
 ---

 apiVersion: traefik.containo.us/v1alpha1
@@ -29,8 +30,11 @@ metadata:
 spec:
  ipWhiteList:
    sourceRange:
-      - 192.168.0.0/16
+      - 192.168.10.1/32
+      - 192.168.30.1/24
      - 10.0.0.0/8
+    ipStrategy:
+      depth: 1

 ---

--- a/traefik/values.yaml
+++ b/traefik/values.yaml
@@ -582,7 +582,7 @@ traefik:
      # Trust forwarded  headers information (X-Forwarded-*).
      forwardedHeaders:
        trustedIPs: 
-          - "192.168.10.1"
+          - "192.168.11.1"
        insecure: false
      #
      # Enable the Proxy Protocol header parsing for the entry point
@@ -613,7 +613,7 @@ traefik:
      ## Trust forwarded  headers information (X-Forwarded-*).
      forwardedHeaders:
        trustedIPs: 
-          - "192.168.10.1"
+          - "192.168.11.1"
        insecure: false
      #
      ## Enable the Proxy Protocol header parsing for the entry point
--- a/uptimekuma/templates/ingress.yaml
+++ b/uptimekuma/templates/ingress.yaml
@@ -6,7 +6,7 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`kuma.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`kuma.prd.durp.info`) && PathPrefix(`/`)
    middlewares:
    - name: authentik-proxy-provider
      namespace: traefik    
@@ -28,9 +28,9 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "kuma.dev.durp.info"
+  commonName: "kuma.prd.durp.info"
  dnsNames:
-  - "kuma.dev.durp.info"  
+  - "kuma.prd.durp.info"  

 ---

@@ -39,7 +39,7 @@ apiVersion: v1
 metadata:
  name: heimdall-external-dns
  annotations:
-    external-dns.alpha.kubernetes.io/hostname: kuma.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: kuma.prd.durp.info
 spec:
  type: ExternalName
-  externalName: dev.durp.info
+  externalName: prd.durp.info
--- a/vault/templates/ingress.yaml
+++ b/vault/templates/ingress.yaml
@@ -8,9 +8,9 @@ spec:
  entryPoints:
    - websecure
  routes:
-  - match: Host(`vault.internal.dev.durp.info`)
+  - match: Host(`vault.internal.prd.durp.info`)
    middlewares:
-    - name: whitelist
+    - name: internal-only
      namespace: traefik  
    kind: Rule
    services:
@@ -31,7 +31,7 @@ spec:
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
-  commonName: "vault.internal.dev.durp.info"
+  commonName: "vault.internal.prd.durp.info"
  dnsNames:
-  - "vault.internal.dev.durp.info"  
+  - "vault.internal.prd.durp.info"
Author	SHA1	Message	Date
DeveloperDurp	d38a2d2840	update	2024-07-21 09:49:15 -05:00
DeveloperDurp	2b88107a28	Merge branch 'mr-prd' into 'prd' Mr prd See merge request developerdurp/homelab!2	2024-07-21 12:58:33 +00:00
DeveloperDurp	d9be744f17	Mr prd	2024-07-21 12:58:33 +00:00
DeveloperDurp	b1a4779d96	update	2024-07-21 07:41:04 -05:00
DeveloperDurp	54432a447f	update	2024-07-21 07:39:08 -05:00
DeveloperDurp	779d3448d5	update	2024-07-21 07:33:18 -05:00
DeveloperDurp	7d9ddc574f	update	2024-07-21 06:57:15 -05:00
DeveloperDurp	0b4238217b	update ingress	2024-07-21 06:50:32 -05:00
DeveloperDurp	39020882f4	update	2024-07-21 06:28:57 -05:00
DeveloperDurp	39f53751ea	update	2024-07-21 06:27:08 -05:00
DeveloperDurp	d686567857	update	2024-07-21 06:25:13 -05:00
DeveloperDurp	74bca2946b	update	2024-07-21 06:23:44 -05:00
DeveloperDurp	1972f4a965	add metallb	2024-07-21 06:21:02 -05:00
DeveloperDurp	b4f11ea722	update for ollama url	2024-07-20 09:22:12 -05:00
DeveloperDurp	004990a4ca	update	2024-06-23 12:15:12 -05:00
pipeline	1481dbe107	Update Chart	2024-05-29 11:29:48 +00:00
DeveloperDurp	0414919e05	update	2024-05-25 07:30:32 -05:00
DeveloperDurp	d5ab5c4671	move all to prd	2024-05-11 06:34:17 -05:00