update

Mr prd

See merge request developerdurp/homelab!2

argocd/templates/InternalProxy.yaml

@@ -1,23 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: internalproxy
-  namespace: argocd
-spec:
-  project: default
-  source:
-    repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
-    path: internalproxy
-    directory:
-      recurse: true
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: internalproxy
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true  
-    syncOptions:
-      - CreateNamespace=true   
-

argocd/templates/argocd.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: argocd
   destination:
     namespace: argocd

argocd/templates/authentik.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: authentik
   destination:
     namespace: authentik

argocd/templates/bitwarden.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: bitwarden
     directory:
       recurse: true

argocd/templates/cert-manager.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: cert-manager
   destination:
     namespace: cert-manager

argocd/templates/crossplane.yml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: crossplane
   destination:
     namespace: crossplane

argocd/templates/durpapi.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: durpapi
   destination:
     namespace: durpapi

argocd/templates/durpot.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: durpot
   destination:
     namespace: durpot

argocd/templates/external-dns.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: external-dns
   destination:
     namespace: external-dns

argocd/templates/external-secrets.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: external-secrets
   destination:
     namespace: external-secrets

argocd/templates/gatekeeper.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: gatekeeper
   destination:
     namespace: gatekeeper

argocd/templates/gitlab-runner.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: gitlab-runner
   destination:
     namespace: gitlab-runner

argocd/templates/heimdall.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: heimdall
   destination:
     namespace: heimdall

argocd/templates/ingress.yaml

@@ -8,7 +8,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`argocd.internal.dev.durp.info`)
+  - match: Host(`argocd.internal.prd.durp.info`)
     middlewares:
     - name: internal-only
       namespace: traefik  
@@ -31,6 +31,6 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "argocd.internal.dev.durp.info"
+  commonName: "argocd.internal.prd.durp.info"
   dnsNames:
-  - "argocd.internal.dev.durp.info"  
+  - "argocd.internal.prd.durp.info"  

argocd/templates/krakend.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: krakend
   destination:
     namespace: krakend

argocd/templates/kube-prometheus-stack.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: kube-prometheus-stack
   destination:
     namespace: kube-prometheus-stack

argocd/templates/kubeclarity.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: kubeclarity
   destination:
     namespace: kubeclarity

argocd/templates/littlelink.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: littlelink
     directory:
       recurse: true

argocd/templates/longhorn.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: longhorn
   destination:
     namespace: longhorn-system

argocd/templates/metallb-system.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: metallb-system
   destination:
     namespace: metallb-system

argocd/templates/nfs-client.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: nfs-client
     directory:
       recurse: true

argocd/templates/open-webui.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: open-webui
   destination:
     namespace: open-webui

argocd/templates/traefik.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: traefik
   destination:
     namespace: traefik

argocd/templates/uptimekuma.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: uptimekuma
     directory:
       recurse: true

argocd/templates/vault.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://gitlab.com/developerdurp/homelab.git
-    targetRevision: dev
+    targetRevision: prd
     path: vault
   destination:
     namespace: vault

argocd/values.yaml

@@ -1,10 +1,28 @@
 argo-cd:
+
   global:
     revisionHistoryLimit: 1
     image:
       repository: registry.internal.durp.info/argoproj/argocd
       imagePullPolicy: Always
 
+  server:
+    #extraArgs:
+    #  - --dex-server-plaintext
+    #  - --dex-server=argocd-dex-server:5556
+    # oidc.config: |
+    #   name: AzureAD
+    #   issuer: https://login.microsoftonline.com/TENANT_ID/v2.0
+    #   clientID: CLIENT_ID
+    #   clientSecret: $oidc.azuread.clientSecret
+    #   requestedIDTokenClaims:
+    #     groups:
+    #       essential: true
+    #   requestedScopes:
+    #     - openid
+    #     - profile
+    #     - email
+
   dex:
     enabled: true
     image:
@@ -15,12 +33,12 @@ argo-cd:
     cm:
       create: true
       annotations: {}
-      url: https://argocd.dev.durp.info
+      url: https://argocd.internal.prd.durp.info
       oidc.tls.insecure.skip.verify: "true"
       dex.config: |
         connectors:
           - config:
-              issuer: https://authentik.dev.durp.info/application/o/argocd/
+              issuer: https://authentik.prd.durp.info/application/o/argocd/
               clientID: lKuMgyYaOlQMNAUSjsRVYgkwZG9UT6CeFWeTLAcl
               clientSecret: $client-secret:clientSecret
               insecureEnableGroups: true
@@ -36,9 +54,9 @@ argo-cd:
     rbac:
       create: true
       policy.csv: |
-        g, ArgoCD Admins, role:admin
+        g, ArgoCD Admins, role:admin 
       scopes: "[groups]"
 
   server:
-    route:
+    route: 
       enabled: false

authentik/templates/ingress.yaml

@@ -6,7 +6,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`authentik.dev.durp.info`) && PathPrefix(`/`) 
+  - match: Host(`authentik.prd.durp.info`) && PathPrefix(`/`) 
     kind: Rule
     services:
     - name: authentik-server
@@ -25,9 +25,9 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "authentik.dev.durp.info"
+  commonName: "authentik.prd.durp.info"
   dnsNames:
-  - "authentik.dev.durp.info" 
+  - "authentik.prd.durp.info" 
 
 ---
 
@@ -36,7 +36,7 @@ apiVersion: v1
 metadata:
   name: authentik-external-dns
   annotations:
-    external-dns.alpha.kubernetes.io/hostname: authentik.durp.info
+    external-dns.alpha.kubernetes.io/hostname: authentik.prd.durp.info
 spec:
   type: ExternalName
-  externalName: durp.info
+  externalName:.prd.durp.info

bitwarden/templates/ingress.yaml

@@ -6,7 +6,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`bitwarden.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`bitwarden.prd.durp.info`) && PathPrefix(`/`)
     kind: Rule
     services:
     - name: bitwarden
@@ -25,9 +25,9 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "bitwarden.dev.durp.info"
+  commonName: "bitwarden.prd.durp.info"
   dnsNames:
-  - "bitwarden.dev.durp.info"  
+  - "bitwarden.prd.durp.info"  
 
 ---
 
@@ -36,10 +36,10 @@ apiVersion: v1
 metadata:
   name: bitwarden-external-dns
   annotations:
-    external-dns.alpha.kubernetes.io/hostname: bitwarden.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: bitwarden.prd.durp.info
 spec:
   type: ExternalName
-  externalName: dev.durp.info
+  externalName:.prd.durp.info
 
 ---
 
@@ -51,7 +51,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`bitwarden.dev.durp.info`) && PathPrefix(`/admin`)
+  - match: Host(`bitwarden.prd.durp.info`) && PathPrefix(`/admin`)
     kind: Rule
     middlewares:
     - name: whitelist

durpapi/Chart.yaml

@@ -1,11 +1,11 @@
+description: A Helm chart for Kubernetes
+name: durpapi
+appVersion: 0.1.0
+dependencies:
+- condition: postgresql.enabled
+  name: postgresql
+  version: 12.5.*
+  repository: https://charts.bitnami.com/bitnami
+version: 0.1.0-dev0184
 apiVersion: v2
 type: application
-version: 0.1.0-dev0192
-description: A Helm chart for Kubernetes
-appVersion: 0.1.0
-name: durpapi
-dependencies:
-- version: 12.5.*
-  condition: postgresql.enabled
-  repository: https://charts.bitnami.com/bitnami
-  name: postgresql

durpapi/templates/ingress.yaml

@@ -6,7 +6,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host("api.dev.durp.info") && PathPrefix(`/api`)
+  - match: Host("api.prd.durp.info") && PathPrefix(`/api`)
     kind: Rule
     middlewares:
       - name: jwt
@@ -24,7 +24,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host("api.dev.durp.info") && PathPrefix(`/swagger`)
+  - match: Host("api.prd.durp.info") && PathPrefix(`/swagger`)
     kind: Rule
     services:
     - name: "durpapi-service"
@@ -41,5 +41,4 @@ spec:
     jwt:
       Required: true
       Keys:
-        - https://authentik.durp.info/application/o/api/jwks
+        - https://authentik.prd.durp.info/application/o/api/jwks/
-

external-dns/values.yaml

@@ -4,10 +4,10 @@ external-dns:
 
   image:
     pullPolicy: Always
-  txtPrefix: "dev-"
+  txtPrefix: "prd-"
   sources:
     - service
-    
+
   provider: cloudflare
   cloudflare:
     secretName : "external-dns"

heimdall/templates/ingress.yaml

@@ -7,7 +7,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`heimdall.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`heimdall.prd.durp.info`) && PathPrefix(`/`)
     middlewares:
     - name: authentik-proxy-provider
       namespace: traefik  
@@ -15,7 +15,7 @@ spec:
     services:
     - name: heimdall
       port: 80
-  - match: Host(`heimdall.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
+  - match: Host(`heimdall.prd.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
     kind: Rule
     services:
     - name: ak-outpost-authentik-embedded-outpost
@@ -35,9 +35,9 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "heimdall.dev.durp.info"
+  commonName: "heimdall.prd.durp.info"
   dnsNames:
-  - "heimdall.dev.durp.info"  
+  - "heimdall.prd.durp.info"  
 
 ---
 
@@ -46,7 +46,7 @@ apiVersion: v1
 metadata:
   name: heimdall-external-dns
   annotations:
-    external-dns.alpha.kubernetes.io/hostname: heimdall.durp.info
+    external-dns.alpha.kubernetes.io/hostname: heimdall.prd.durp.info
 spec:
   type: ExternalName
-  externalName: durp.info
+  externalName:.prd.durp.info

internalproxy/Chart.yaml

@@ -1,7 +0,0 @@
-apiVersion: v2
-name: internalproxy
-description: A Helm chart for Kubernetes
-type: application
-
-version: 0.1.0
-appVersion: "0.1.0"

krakend/templates/ingress.yaml

@@ -7,9 +7,9 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "api.dev.durp.info"
+  commonName: "api.prd.durp.info"
   dnsNames:
-  - "api.dev.durp.info"        
+  - "api.prd.durp.info"        
 
 ---
 
@@ -21,7 +21,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`api.dev.durp.info`) && PathPrefix(`/`)
+    - match: Host(`api.prd.durp.info`) && PathPrefix(`/`)
       kind: Rule
       services:
         - name: krakend-service
@@ -37,10 +37,10 @@ apiVersion: v1
 metadata:
   name: api-external-dns
   annotations:
-    external-dns.alpha.kubernetes.io/hostname: api.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: api.prd.durp.info
 spec:
   type: ExternalName
-  externalName: dev.durp.info
+  externalName:.prd.durp.info
 
 ---
 
@@ -49,7 +49,7 @@ apiVersion: v1
 metadata:
   name: api-developer-dns
   annotations:
-    external-dns.alpha.kubernetes.io/hostname: developer.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: developer.prd.durp.info
     external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 spec:
   type: ExternalName

kube-prometheus-stack/templates/ingress.yaml

@@ -6,7 +6,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`grafana.dev.durp.info`) && PathPrefix(`/`) 
+  - match: Host(`grafana.prd.durp.info`) && PathPrefix(`/`) 
     kind: Rule
     services:
     - name: grafana
@@ -25,9 +25,9 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "grafana.dev.durp.info"
+  commonName: "grafana.prd.durp.info"
   dnsNames:
-  - "grafana.dev.durp.info"  
+  - "grafana.prd.durp.info"  
 
 ---
 
@@ -39,7 +39,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`alertmanager.dev.durp.info`) && PathPrefix(`/`) 
+  - match: Host(`alertmanager.prd.durp.info`) && PathPrefix(`/`) 
     middlewares:
     - name: whitelist
       namespace: traefik
@@ -63,9 +63,9 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "alertmanager.dev.durp.info"
+  commonName: "alertmanager.prd.durp.info"
   dnsNames:
-  - "alertmanager.dev.durp.info"  
+  - "alertmanager.prd.durp.info"  
 
 ---
 
@@ -74,7 +74,7 @@ apiVersion: v1
 metadata:
   name: grafana-external-dns
   annotations:
-    external-dns.alpha.kubernetes.io/hostname: grafana.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: grafana.prd.durp.info
 spec:
   type: ExternalName
-  externalName: dev.durp.info  
+  externalName:.prd.durp.info  

kubeclarity/templates/ingress.yaml

@@ -6,7 +6,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`kubeclarity.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`kubeclarity.prd.durp.info`) && PathPrefix(`/`)
     middlewares:
     - name: whitelist
       namespace: traefik
@@ -30,9 +30,9 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "kubeclarity.dev.durp.info"
+  commonName: "kubeclarity.prd.durp.info"
   dnsNames:
-  - "kubeclarity.dev.durp.info"  
+  - "kubeclarity.prd.durp.info"  
 
 ---
 
@@ -41,7 +41,7 @@ apiVersion: v1
 metadata:
   name: kubeclarity-external-dns
   annotations:
-    external-dns.alpha.kubernetes.io/hostname: kubeclarity.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: kubeclarity.prd.durp.info
 spec:
   type: ExternalName
-  externalName: dev.durp.info
+  externalName:.prd.durp.info

littlelink/templates/ingress.yaml

@@ -6,7 +6,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`links.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`links.prd.durp.info`) && PathPrefix(`/`)
     kind: Rule
     services:
     - name: littlelink
@@ -25,9 +25,9 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "links.dev.durp.info"
+  commonName: "links.prd.durp.info"
   dnsNames:
-  - "links.dev.durp.info"  
+  - "links.prd.durp.info"  
 
 ---
 
@@ -36,8 +36,7 @@ apiVersion: v1
 metadata:
   name: links-external-dns
   annotations:
-    external-dns.alpha.kubernetes.io/hostname: links.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: links.prd.durp.info
 spec:
   type: ExternalName
-  externalName: dev.durp.info
+  externalName:.prd.durp.info
-

longhorn/Chart.yaml

@@ -9,4 +9,4 @@ appVersion: "1.16.0"
 dependencies:
 - name: longhorn
   repository: https://charts.longhorn.io
-  version: 1.7.0
+  version: 1.6.1

longhorn/templates/ingress.yaml

@@ -6,7 +6,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`longhorn.internal.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`longhorn.internal.prd.durp.info`) && PathPrefix(`/`)
     middlewares:
     - name: whitelist
       namespace: traefik
@@ -16,7 +16,7 @@ spec:
     services:
     - name: longhorn-frontend
       port: 80
-  - match: Host(`longhorn.internal.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
+  - match: Host(`longhorn.internal.prd.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
     kind: Rule
     services:
     - name: ak-outpost-authentik-embedded-outpost
@@ -36,6 +36,6 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "longhorn.internal.dev.durp.info"
+  commonName: "longhorn.internal.prd.durp.info"
   dnsNames:
-  - "longhorn.internal.dev.durp.info"  
+  - "longhorn.internal.prd.durp.info"  

longhorn/templates/secrets.yaml

@@ -8,7 +8,7 @@ spec:
     name: vault
     kind: ClusterSecretStore
   target:
-    name: longhorn-backup-token-secret2
+    name: longhorn-backup-token-secret
   data:
   - secretKey: AWS_ACCESS_KEY_ID
     remoteRef:

longhorn/values.yaml

@@ -76,8 +76,8 @@ longhorn:
     snapshotterReplicaCount: ~
   
   defaultSettings:
-    backupTarget: S3://longhorn-dev@us-east-1/
+    backupTarget: S3://longhorn-prd@us-east-1/
-    backupTargetCredentialSecret: longhorn-backup-token-secret2
+    backupTargetCredentialSecret: longhorn-backup-token-secret
     allowRecurringJobWhileVolumeDetached: ~
     createDefaultDiskLabeledNodes: ~
     defaultDataPath: ~

metallb-system/templates/config.yaml

@@ -4,12 +4,12 @@ metadata:
   name: cheap
 spec:
   addresses:
-    - 192.168.10.110-192.168.10.120
+    - 192.168.11.130-192.168.11.140
 ---
 apiVersion: metallb.io/v1beta1
 kind: L2Advertisement
 metadata:
-  name: pool
+  name: poop
   namespace: metallb-system
 spec:
   ipAddressPools:

open-webui/templates/ingress.yaml

@@ -6,7 +6,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`open-webui.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`open-webui.prd.durp.info`) && PathPrefix(`/`)
     kind: Rule
     services:
     - name: open-webui
@@ -25,9 +25,9 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "open-webui.dev.durp.info"
+  commonName: "open-webui.prd.durp.info"
   dnsNames:
-  - "open-webui.dev.durp.info"  
+  - "open-webui.prd.durp.info"  
 
 ---
 
@@ -36,7 +36,7 @@ apiVersion: v1
 metadata:
   name: open-webui-external-dns
   annotations:
-    external-dns.alpha.kubernetes.io/hostname: open-webui.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: open-webui.prd.durp.info
 spec:
   type: ExternalName
-  externalName: dev.durp.info
+  externalName: prd.durp.info

traefik/templates/ingress.yaml

@@ -6,7 +6,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`traefik.internal.dev.durp.info`)
+  - match: Host(`traefik.internal.prd.durp.info`)
     middlewares:
     - name: authentik-proxy-provider
       namespace: traefik    
@@ -14,7 +14,7 @@ spec:
     services:
     - name: api@internal
       kind: TraefikService
-  - match: Host(`traefik.internal.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
+  - match: Host(`traefik.internal.prd.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
     kind: Rule
     services:
     - name: ak-outpost-authentik-embedded-outpost
@@ -34,6 +34,6 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "traefik.internal.dev.durp.info"
+  commonName: "traefik.internal.prd.durp.info"
   dnsNames:
-  - "traefik.internal.dev.durp.info"
+  - "traefik.internal.prd.durp.info"

traefik/templates/middleware-chain.yaml

@@ -5,4 +5,5 @@ metadata:
 spec:
   chain:
     middlewares:
+    - name: traefik-real-ip
     - name: whitelist

traefik/templates/middlewares.yaml

@@ -20,6 +20,7 @@ spec:
       - X-authentik-meta-app
       - X-authentik-meta-version
 
+
 ---
 
 apiVersion: traefik.containo.us/v1alpha1
@@ -29,8 +30,11 @@ metadata:
 spec:
   ipWhiteList:
     sourceRange:
-      - 192.168.0.0/16
+      - 192.168.10.1/32
+      - 192.168.30.1/24
       - 10.0.0.0/8
+    ipStrategy:
+      depth: 1
 
 ---
 

traefik/values.yaml

@@ -582,7 +582,7 @@ traefik:
       # Trust forwarded  headers information (X-Forwarded-*).
       forwardedHeaders:
         trustedIPs: 
-          - "192.168.10.1"
+          - "192.168.11.1"
         insecure: false
       #
       # Enable the Proxy Protocol header parsing for the entry point
@@ -613,7 +613,7 @@ traefik:
       ## Trust forwarded  headers information (X-Forwarded-*).
       forwardedHeaders:
         trustedIPs: 
-          - "192.168.10.1"
+          - "192.168.11.1"
         insecure: false
       #
       ## Enable the Proxy Protocol header parsing for the entry point

uptimekuma/templates/ingress.yaml

@@ -6,7 +6,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`kuma.dev.durp.info`) && PathPrefix(`/`)
+  - match: Host(`kuma.prd.durp.info`) && PathPrefix(`/`)
     middlewares:
     - name: authentik-proxy-provider
       namespace: traefik    
@@ -28,9 +28,9 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "kuma.dev.durp.info"
+  commonName: "kuma.prd.durp.info"
   dnsNames:
-  - "kuma.dev.durp.info"  
+  - "kuma.prd.durp.info"  
 
 ---
 
@@ -39,7 +39,7 @@ apiVersion: v1
 metadata:
   name: heimdall-external-dns
   annotations:
-    external-dns.alpha.kubernetes.io/hostname: kuma.dev.durp.info
+    external-dns.alpha.kubernetes.io/hostname: kuma.prd.durp.info
 spec:
   type: ExternalName
-  externalName: dev.durp.info
+  externalName: prd.durp.info

vault/templates/ingress.yaml

@@ -8,9 +8,9 @@ spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`vault.internal.dev.durp.info`)
+  - match: Host(`vault.internal.prd.durp.info`)
     middlewares:
-    - name: whitelist
+    - name: internal-only
       namespace: traefik  
     kind: Rule
     services:
@@ -31,7 +31,7 @@ spec:
   issuerRef:
     name: letsencrypt-production
     kind: ClusterIssuer
-  commonName: "vault.internal.dev.durp.info"
+  commonName: "vault.internal.prd.durp.info"
   dnsNames:
-  - "vault.internal.dev.durp.info"  
+  - "vault.internal.prd.durp.info"