Add rubenhensen.nl to all ingresses

argocd/ingress.yaml

@@ -24,11 +24,19 @@ spec:
             name: argocd-server
             port:
               name: https
-            
-  # TLS configuration for HTTPS
+  - host: argocd.rubenhensen.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: argocd-server
+            port:
+              name: https
   tls:
-    # TLS secretName used on ClusterIssuer
     - secretName:  letsencrypt-prod
       hosts:
         - argocd.hensen.io
+        - argocd.rubenhensen.nl
 

authentik/blueprint-vault-oidc.yaml

@@ -24,6 +24,8 @@ data:
           redirect_uris:
             - matching_mode: strict
               url: https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback
+            - matching_mode: strict
+              url: https://vault.rubenhensen.nl/ui/vault/auth/oidc/oidc/callback
             - matching_mode: strict
               url: http://localhost:8250/oidc/callback
           signing_key: !Find [authentik_crypto.certificatekeypair, [name, "authentik Self-signed Certificate"]]

dns/domains/rubenhensen.nl.yaml

@@ -23,6 +23,34 @@ records:
     expire: 86400
     type: CNAME
     content: "@"
+  - name: "argocd"
+    expire: 86400
+    type: CNAME
+    content: "@"
+  - name: "vault"
+    expire: 86400
+    type: CNAME
+    content: "@"
+  - name: "rss"
+    expire: 86400
+    type: CNAME
+    content: "@"
+  - name: "ha"
+    expire: 86400
+    type: CNAME
+    content: "@"
+  - name: "longhorn"
+    expire: 86400
+    type: CNAME
+    content: "@"
+  - name: "lingo"
+    expire: 86400
+    type: CNAME
+    content: "@"
+  - name: "blog"
+    expire: 86400
+    type: CNAME
+    content: "@"
   - name: "@"
     expire: 86400
     type: MX

freshrss/ingress.yaml

@@ -19,10 +19,19 @@ spec:
             name: freshrss
             port:
               number: 8080
-  # TLS configuration for HTTPS
+  - host: rss.rubenhensen.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: freshrss
+            port:
+              number: 8080
   tls:
-    # TLS secretName used on ClusterIssuer
     - secretName:  letsencrypt-prod
       hosts:
         - rss.hensen.io
+        - rss.rubenhensen.nl
 

ghost-blog/ingress.yaml

@@ -19,6 +19,7 @@ spec:
   tls:
   - hosts:
     - blog.hensen.io
+    - blog.rubenhensen.nl
     secretName: ghost-tls-secret
   rules:
   - host: blog.hensen.io
@@ -31,3 +32,13 @@ spec:
             name: ghost-service
             port:
               name: ghost
+  - host: blog.rubenhensen.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: ghost-service
+            port:
+              name: ghost

home-assistant/ingress.yaml

@@ -34,11 +34,19 @@ spec:
             name: home-assistant-external
             port:
               number: 8123
-            
-  # TLS configuration for HTTPS
+  - host: ha.rubenhensen.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: home-assistant-external
+            port:
+              number: 8123
   tls:
-    # TLS secretName used on ClusterIssuer
     - secretName:  letsencrypt-prod
       hosts:
         - ha.hensen.io
+        - ha.rubenhensen.nl
 

lingo/lingo-ingress.yaml

@@ -19,10 +19,21 @@ spec:
             name: lingo-api
             port:
               number: 8000
+  - host: lingo.rubenhensen.nl
+    http:
+      paths:
+      - path: /api(/|$)(.*)
+        pathType: ImplementationSpecific
+        backend:
+          service:
+            name: lingo-api
+            port:
+              number: 8000
   tls:
     - secretName: letsencrypt-prod
       hosts:
         - lingo.hensen.io
+        - lingo.rubenhensen.nl
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -44,7 +55,18 @@ spec:
             name: lingo-frontend
             port:
               number: 8001
+  - host: lingo.rubenhensen.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: lingo-frontend
+            port:
+              number: 8001
   tls:
     - secretName: letsencrypt-prod
       hosts:
         - lingo.hensen.io
+        - lingo.rubenhensen.nl

longhorn/ingress.yaml

@@ -34,10 +34,18 @@ spec:
             name: longhorn-frontend
             port:
               number: 80
-            
-  # TLS configuration for HTTPS
+  - host: longhorn.rubenhensen.nl
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: longhorn-frontend
+            port:
+              number: 80
   tls:
-    # TLS secretName used on ClusterIssuer
     - secretName:  letsencrypt-prod
       hosts:
         - longhorn.hensen.io
+        - longhorn.rubenhensen.nl

vault/configure-oidc.yaml

@@ -64,6 +64,7 @@ spec:
                 default_role="default"
               vault write auth/oidc/role/default \
                 allowed_redirect_uris="https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback" \
+                allowed_redirect_uris="https://vault.rubenhensen.nl/ui/vault/auth/oidc/oidc/callback" \
                 allowed_redirect_uris="http://localhost:8250/oidc/callback" \
                 user_claim="preferred_username" \
                 oidc_scopes="openid,profile,email" \

vault/overrides.yaml

@@ -37,5 +37,7 @@ server:
           - secretName: letsencrypt-prod
             hosts:
               - vault.hensen.io
+              - vault.rubenhensen.nl
       hosts:
         - host: "vault.hensen.io"
+        - host: "vault.rubenhensen.nl"