Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

This commit is contained in:
Ruben Hensen
2026-04-06 18:09:24 +02:00
parent c876a725c1
commit faaf6b6729
16 changed files with 13 additions and 97 deletions
-2
View File
@@ -99,12 +99,10 @@ spec:
cert-manager.io/cluster-issuer: prod-cluster-issuer
hosts:
- authentik.rubenhensen.nl
- authentik.hensen.io
tls:
- secretName: authentik-tls
hosts:
- authentik.rubenhensen.nl
- authentik.hensen.io
worker:
volumes:
- name: blueprint-vault
-11
View File
@@ -14,16 +14,6 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: argocd.hensen.io
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: argocd-server
port:
name: https
- host: argocd.rubenhensen.nl
http:
paths:
@@ -37,6 +27,5 @@ spec:
tls:
- secretName: letsencrypt-prod
hosts:
- argocd.hensen.io
- argocd.rubenhensen.nl
+2 -2
View File
@@ -23,7 +23,7 @@ data:
client_secret: !Env [STALWART_OIDC_CLIENT_SECRET, ""]
redirect_uris:
- matching_mode: strict
url: https://stalwart.rubenhensen.nl/login/callback
url: https://mail.rubenhensen.nl/login/callback
signing_key: !Find [authentik_crypto.certificatekeypair, [name, "authentik Self-signed Certificate"]]
property_mappings:
- !Find [authentik_providers_oauth2.scopemapping, [managed, goauthentik.io/providers/oauth2/scope-openid]]
@@ -37,4 +37,4 @@ data:
attrs:
name: Stalwart Mail
provider: !KeyOf stalwart-provider
meta_launch_url: https://stalwart.rubenhensen.nl
meta_launch_url: https://mail.rubenhensen.nl
+1 -3
View File
@@ -22,8 +22,6 @@ data:
client_id: vault
client_secret: !Env [VAULT_OIDC_CLIENT_SECRET, ""]
redirect_uris:
- matching_mode: strict
url: https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback
- matching_mode: strict
url: https://vault.rubenhensen.nl/ui/vault/auth/oidc/oidc/callback
- matching_mode: strict
@@ -41,4 +39,4 @@ data:
attrs:
name: Vault
provider: !KeyOf vault-provider
meta_launch_url: https://vault.hensen.io
meta_launch_url: https://vault.rubenhensen.nl
-11
View File
@@ -9,16 +9,6 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: rss.hensen.io
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: freshrss
port:
number: 8080
- host: rss.rubenhensen.nl
http:
paths:
@@ -32,6 +22,5 @@ spec:
tls:
- secretName: letsencrypt-prod
hosts:
- rss.hensen.io
- rss.rubenhensen.nl
+3 -3
View File
@@ -92,7 +92,7 @@ spec:
- name: X-Forwarded-Proto
value: https
- name: Host
value: blog.hensen.io
value: blog.rubenhensen.nl
periodSeconds: 10
timeoutSeconds: 3
successThreshold: 1
@@ -106,7 +106,7 @@ spec:
- name: X-Forwarded-Proto
value: https
- name: Host
value: blog.hensen.io
value: blog.rubenhensen.nl
periodSeconds: 300
timeoutSeconds: 3
successThreshold: 1
@@ -135,7 +135,7 @@ spec:
name: ghost-mysql-env
key: MYSQL_DATABASE
- name: url
value: https://blog.hensen.io
value: https://blog.rubenhensen.nl
envFrom:
- secretRef:
name: ghost-mail-config
-11
View File
@@ -18,20 +18,9 @@ spec:
ingressClassName: nginx
tls:
- hosts:
- blog.hensen.io
- blog.rubenhensen.nl
secretName: ghost-tls-secret
rules:
- host: blog.hensen.io
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: ghost-service
port:
name: ghost
- host: blog.rubenhensen.nl
http:
paths:
-11
View File
@@ -24,16 +24,6 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: ha.hensen.io
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: home-assistant-external
port:
number: 8123
- host: ha.rubenhensen.nl
http:
paths:
@@ -47,6 +37,5 @@ spec:
tls:
- secretName: letsencrypt-prod
hosts:
- ha.hensen.io
- ha.rubenhensen.nl
+2 -2
View File
@@ -101,7 +101,7 @@ spec:
cert-manager.io/cluster-issuer: prod-cluster-issuer
nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
hosts:
# - host: immich.hensen.io
# - host: immich.rubenhensen.nl
# paths:
# - path: "/"
# - host: mbg.hensen.io
@@ -118,7 +118,7 @@ spec:
tls:
- secretName: letsencrypt-prod
hosts:
# - immich.hensen.io
# - immich.rubenhensen.nl
- mbg.hensen.io
- foto.scoutingmbg.nl
-22
View File
@@ -9,16 +9,6 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: lingo.hensen.io
http:
paths:
- path: /api(/|$)(.*)
pathType: ImplementationSpecific
backend:
service:
name: lingo-api
port:
number: 8000
- host: lingo.rubenhensen.nl
http:
paths:
@@ -32,7 +22,6 @@ spec:
tls:
- secretName: letsencrypt-prod
hosts:
- lingo.hensen.io
- lingo.rubenhensen.nl
---
apiVersion: networking.k8s.io/v1
@@ -45,16 +34,6 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: lingo.hensen.io
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: lingo-frontend
port:
number: 8001
- host: lingo.rubenhensen.nl
http:
paths:
@@ -68,5 +47,4 @@ spec:
tls:
- secretName: letsencrypt-prod
hosts:
- lingo.hensen.io
- lingo.rubenhensen.nl
-11
View File
@@ -24,16 +24,6 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: longhorn.hensen.io
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: longhorn-frontend
port:
number: 80
- host: longhorn.rubenhensen.nl
http:
paths:
@@ -47,5 +37,4 @@ spec:
tls:
- secretName: letsencrypt-prod
hosts:
- longhorn.hensen.io
- longhorn.rubenhensen.nl
+2 -2
View File
@@ -9,7 +9,7 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: nas.hensen.io
- host: nas.rubenhensen.nl
http:
paths:
- path: /
@@ -25,5 +25,5 @@ spec:
# TLS secretName used on ClusterIssuer
- secretName: letsencrypt-prod
hosts:
- nas.hensen.io
- nas.rubenhensen.nl
-1
View File
@@ -63,7 +63,6 @@ spec:
oidc_client_secret="$OIDC_CLIENT_SECRET" \
default_role="default"
vault write auth/oidc/role/default \
allowed_redirect_uris="https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback" \
allowed_redirect_uris="https://vault.rubenhensen.nl/ui/vault/auth/oidc/oidc/callback" \
allowed_redirect_uris="http://localhost:8250/oidc/callback" \
user_claim="preferred_username" \
-2
View File
@@ -36,8 +36,6 @@ server:
tls:
- secretName: letsencrypt-prod
hosts:
- vault.hensen.io
- vault.rubenhensen.nl
hosts:
- host: "vault.hensen.io"
- host: "vault.rubenhensen.nl"
+1 -1
View File
@@ -5,7 +5,7 @@ metadata:
spec:
provider:
vault:
server: "https://vault.hensen.io"
server: "https://vault.rubenhensen.nl"
path: "kv"
# Version is the Vault KV secret engine version.
# This can be either "v1" or "v2", defaults to "v2"
+2 -2
View File
@@ -24,7 +24,7 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: alv.hensen.io
- host: alv.rubenhensen.nl
http:
paths:
- path: /
@@ -40,4 +40,4 @@ spec:
# TLS secretName used on ClusterIssuer
- secretName: letsencrypt-prod
hosts:
- alv.hensen.io
- alv.rubenhensen.nl