Files
homelab/whoogle/templates/ingress.yaml

81 lines
2.1 KiB
YAML

#apiVersion: networking.k8s.io/v1
#kind: Ingress
#metadata:
# name: whoogle
# annotations:
# kubernetes.io/ingress.class: nginx
# nginx.ingress.kubernetes.io/proxy-body-size: "0"
# cert-manager.io/cluster-issuer: letsencrypt-production
# # nginx.ingress.kubernetes.io/auth-url: |-
# # http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
# # nginx.ingress.kubernetes.io/auth-signin: |-
# # https://whoogle.durp.info/outpost.goauthentik.io/start?rd=$escaped_request_uri
# # nginx.ingress.kubernetes.io/auth-response-headers: |-
# # Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
# # nginx.ingress.kubernetes.io/auth-snippet: |
# # proxy_set_header X-Forwarded-Host $http_host;
#spec:
# rules:
# - host: whoogle.durp.info
# http:
# paths:
# - path: /
# pathType: Prefix
# backend:
# service:
# name: whoogle
# port:
# number: 5000
# - path: /outpost.goauthentik.io
# pathType: Prefix
# backend:
# service:
# name: ak-outpost-authentik-embedded-outpost
# port:
# number: 9000
# tls:
# - hosts:
# - whoogle.durp.info
# secretName: whoogle-tls
#
#---
#
#kind: Service
#apiVersion: v1
#metadata:
# name: ak-outpost-authentik-embedded-outpost
#spec:
# type: ExternalName
# externalName: ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
name: whoogle-ingress
spec:
entryPoints:
- websecure
routes:
- match: Host(`whoogle.durp.info`) && PathPrefix(`/`)
kind: Rule
services:
- name: whoogle
port: 5000
tls:
secretName: whoogle-tls
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: whoogle-tls
spec:
secretName: whoogle-tls
issuerRef:
name: letsencrypt-production
kind: ClusterIssuer
commonName: "whoogle.durp.info"
dnsNames:
- "whoogle.durp.info"