diff --git a/argocd/ingress.yaml b/argocd/ingress.yaml index 1f74eb9..5f2a4ad 100644 --- a/argocd/ingress.yaml +++ b/argocd/ingress.yaml @@ -22,13 +22,21 @@ spec: backend: service: name: argocd-server - port: + port: + name: https + - host: argocd.rubenhensen.nl + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: argocd-server + port: name: https - - # TLS configuration for HTTPS tls: - # TLS secretName used on ClusterIssuer - secretName: letsencrypt-prod hosts: - argocd.hensen.io + - argocd.rubenhensen.nl diff --git a/authentik/blueprint-vault-oidc.yaml b/authentik/blueprint-vault-oidc.yaml index a236457..4ac6438 100644 --- a/authentik/blueprint-vault-oidc.yaml +++ b/authentik/blueprint-vault-oidc.yaml @@ -24,6 +24,8 @@ data: redirect_uris: - matching_mode: strict url: https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback + - matching_mode: strict + url: https://vault.rubenhensen.nl/ui/vault/auth/oidc/oidc/callback - matching_mode: strict url: http://localhost:8250/oidc/callback signing_key: !Find [authentik_crypto.certificatekeypair, [name, "authentik Self-signed Certificate"]] diff --git a/dns/domains/rubenhensen.nl.yaml b/dns/domains/rubenhensen.nl.yaml index cf42ae5..20b6ce4 100644 --- a/dns/domains/rubenhensen.nl.yaml +++ b/dns/domains/rubenhensen.nl.yaml @@ -23,6 +23,34 @@ records: expire: 86400 type: CNAME content: "@" + - name: "argocd" + expire: 86400 + type: CNAME + content: "@" + - name: "vault" + expire: 86400 + type: CNAME + content: "@" + - name: "rss" + expire: 86400 + type: CNAME + content: "@" + - name: "ha" + expire: 86400 + type: CNAME + content: "@" + - name: "longhorn" + expire: 86400 + type: CNAME + content: "@" + - name: "lingo" + expire: 86400 + type: CNAME + content: "@" + - name: "blog" + expire: 86400 + type: CNAME + content: "@" - name: "@" expire: 86400 type: MX diff --git a/freshrss/ingress.yaml b/freshrss/ingress.yaml index f3360d8..f0ffc01 100644 --- a/freshrss/ingress.yaml +++ b/freshrss/ingress.yaml @@ -17,12 +17,21 @@ spec: backend: service: name: freshrss - port: - number: 8080 - # TLS configuration for HTTPS + port: + number: 8080 + - host: rss.rubenhensen.nl + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: freshrss + port: + number: 8080 tls: - # TLS secretName used on ClusterIssuer - secretName: letsencrypt-prod hosts: - rss.hensen.io + - rss.rubenhensen.nl diff --git a/ghost-blog/ingress.yaml b/ghost-blog/ingress.yaml index 8ddb807..89e957c 100644 --- a/ghost-blog/ingress.yaml +++ b/ghost-blog/ingress.yaml @@ -19,6 +19,7 @@ spec: tls: - hosts: - blog.hensen.io + - blog.rubenhensen.nl secretName: ghost-tls-secret rules: - host: blog.hensen.io @@ -31,3 +32,13 @@ spec: name: ghost-service port: name: ghost + - host: blog.rubenhensen.nl + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: ghost-service + port: + name: ghost diff --git a/home-assistant/ingress.yaml b/home-assistant/ingress.yaml index d08f1ba..435a34f 100644 --- a/home-assistant/ingress.yaml +++ b/home-assistant/ingress.yaml @@ -32,13 +32,21 @@ spec: backend: service: name: home-assistant-external - port: + port: + number: 8123 + - host: ha.rubenhensen.nl + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: home-assistant-external + port: number: 8123 - - # TLS configuration for HTTPS tls: - # TLS secretName used on ClusterIssuer - secretName: letsencrypt-prod hosts: - ha.hensen.io + - ha.rubenhensen.nl diff --git a/lingo/lingo-ingress.yaml b/lingo/lingo-ingress.yaml index 3f9f88c..0d1a205 100644 --- a/lingo/lingo-ingress.yaml +++ b/lingo/lingo-ingress.yaml @@ -19,10 +19,21 @@ spec: name: lingo-api port: number: 8000 + - host: lingo.rubenhensen.nl + http: + paths: + - path: /api(/|$)(.*) + pathType: ImplementationSpecific + backend: + service: + name: lingo-api + port: + number: 8000 tls: - secretName: letsencrypt-prod hosts: - lingo.hensen.io + - lingo.rubenhensen.nl --- apiVersion: networking.k8s.io/v1 kind: Ingress @@ -44,7 +55,18 @@ spec: name: lingo-frontend port: number: 8001 + - host: lingo.rubenhensen.nl + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: lingo-frontend + port: + number: 8001 tls: - secretName: letsencrypt-prod hosts: - lingo.hensen.io + - lingo.rubenhensen.nl diff --git a/longhorn/ingress.yaml b/longhorn/ingress.yaml index 8c89565..2f68704 100644 --- a/longhorn/ingress.yaml +++ b/longhorn/ingress.yaml @@ -32,12 +32,20 @@ spec: backend: service: name: longhorn-frontend - port: + port: + number: 80 + - host: longhorn.rubenhensen.nl + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: longhorn-frontend + port: number: 80 - - # TLS configuration for HTTPS tls: - # TLS secretName used on ClusterIssuer - secretName: letsencrypt-prod hosts: - longhorn.hensen.io + - longhorn.rubenhensen.nl diff --git a/vault/configure-oidc.yaml b/vault/configure-oidc.yaml index a84d6e9..0cdd3ad 100644 --- a/vault/configure-oidc.yaml +++ b/vault/configure-oidc.yaml @@ -64,6 +64,7 @@ spec: default_role="default" vault write auth/oidc/role/default \ allowed_redirect_uris="https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback" \ + allowed_redirect_uris="https://vault.rubenhensen.nl/ui/vault/auth/oidc/oidc/callback" \ allowed_redirect_uris="http://localhost:8250/oidc/callback" \ user_claim="preferred_username" \ oidc_scopes="openid,profile,email" \ diff --git a/vault/overrides.yaml b/vault/overrides.yaml index 1836e2c..43d09d9 100644 --- a/vault/overrides.yaml +++ b/vault/overrides.yaml @@ -37,5 +37,7 @@ server: - secretName: letsencrypt-prod hosts: - vault.hensen.io + - vault.rubenhensen.nl hosts: - host: "vault.hensen.io" + - host: "vault.rubenhensen.nl"