From faaf6b6729c8eeb8c2c16942e17041811f829e05 Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Mon, 6 Apr 2026 18:09:24 +0200 Subject: [PATCH] Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl --- apps/templates/authentik-helm.yaml | 2 -- argocd/ingress.yaml | 11 ----------- authentik/blueprint-mail-oidc.yaml | 4 ++-- authentik/blueprint-vault-oidc.yaml | 4 +--- freshrss/ingress.yaml | 11 ----------- ghost-blog/ghost-deployment.yaml | 6 +++--- ghost-blog/ingress.yaml | 11 ----------- home-assistant/ingress.yaml | 11 ----------- immich/helm-immich.yaml | 4 ++-- lingo/lingo-ingress.yaml | 22 ---------------------- longhorn/ingress.yaml | 11 ----------- nas/ingress.yaml | 4 ++-- vault/configure-oidc.yaml | 1 - vault/overrides.yaml | 2 -- vault/secret-store.yaml | 2 +- whishper/whishper-ingress.yaml | 4 ++-- 16 files changed, 13 insertions(+), 97 deletions(-) diff --git a/apps/templates/authentik-helm.yaml b/apps/templates/authentik-helm.yaml index 980a200..bbac4a9 100644 --- a/apps/templates/authentik-helm.yaml +++ b/apps/templates/authentik-helm.yaml @@ -99,12 +99,10 @@ spec: cert-manager.io/cluster-issuer: prod-cluster-issuer hosts: - authentik.rubenhensen.nl - - authentik.hensen.io tls: - secretName: authentik-tls hosts: - authentik.rubenhensen.nl - - authentik.hensen.io worker: volumes: - name: blueprint-vault diff --git a/argocd/ingress.yaml b/argocd/ingress.yaml index 5f2a4ad..0ad1250 100644 --- a/argocd/ingress.yaml +++ b/argocd/ingress.yaml @@ -14,16 +14,6 @@ metadata: spec: ingressClassName: nginx rules: - - host: argocd.hensen.io - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: argocd-server - port: - name: https - host: argocd.rubenhensen.nl http: paths: @@ -37,6 +27,5 @@ spec: tls: - secretName: letsencrypt-prod hosts: - - argocd.hensen.io - argocd.rubenhensen.nl diff --git a/authentik/blueprint-mail-oidc.yaml b/authentik/blueprint-mail-oidc.yaml index b353b6c..1fe82b4 100644 --- a/authentik/blueprint-mail-oidc.yaml +++ b/authentik/blueprint-mail-oidc.yaml @@ -23,7 +23,7 @@ data: client_secret: !Env [STALWART_OIDC_CLIENT_SECRET, ""] redirect_uris: - matching_mode: strict - url: https://stalwart.rubenhensen.nl/login/callback + url: https://mail.rubenhensen.nl/login/callback signing_key: !Find [authentik_crypto.certificatekeypair, [name, "authentik Self-signed Certificate"]] property_mappings: - !Find [authentik_providers_oauth2.scopemapping, [managed, goauthentik.io/providers/oauth2/scope-openid]] @@ -37,4 +37,4 @@ data: attrs: name: Stalwart Mail provider: !KeyOf stalwart-provider - meta_launch_url: https://stalwart.rubenhensen.nl + meta_launch_url: https://mail.rubenhensen.nl diff --git a/authentik/blueprint-vault-oidc.yaml b/authentik/blueprint-vault-oidc.yaml index 4ac6438..dcdd204 100644 --- a/authentik/blueprint-vault-oidc.yaml +++ b/authentik/blueprint-vault-oidc.yaml @@ -22,8 +22,6 @@ data: client_id: vault client_secret: !Env [VAULT_OIDC_CLIENT_SECRET, ""] redirect_uris: - - matching_mode: strict - url: https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback - matching_mode: strict url: https://vault.rubenhensen.nl/ui/vault/auth/oidc/oidc/callback - matching_mode: strict @@ -41,4 +39,4 @@ data: attrs: name: Vault provider: !KeyOf vault-provider - meta_launch_url: https://vault.hensen.io + meta_launch_url: https://vault.rubenhensen.nl diff --git a/freshrss/ingress.yaml b/freshrss/ingress.yaml index f0ffc01..34f14d1 100644 --- a/freshrss/ingress.yaml +++ b/freshrss/ingress.yaml @@ -9,16 +9,6 @@ metadata: spec: ingressClassName: nginx rules: - - host: rss.hensen.io - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: freshrss - port: - number: 8080 - host: rss.rubenhensen.nl http: paths: @@ -32,6 +22,5 @@ spec: tls: - secretName: letsencrypt-prod hosts: - - rss.hensen.io - rss.rubenhensen.nl diff --git a/ghost-blog/ghost-deployment.yaml b/ghost-blog/ghost-deployment.yaml index 19cfb3b..26c15db 100644 --- a/ghost-blog/ghost-deployment.yaml +++ b/ghost-blog/ghost-deployment.yaml @@ -92,7 +92,7 @@ spec: - name: X-Forwarded-Proto value: https - name: Host - value: blog.hensen.io + value: blog.rubenhensen.nl periodSeconds: 10 timeoutSeconds: 3 successThreshold: 1 @@ -106,7 +106,7 @@ spec: - name: X-Forwarded-Proto value: https - name: Host - value: blog.hensen.io + value: blog.rubenhensen.nl periodSeconds: 300 timeoutSeconds: 3 successThreshold: 1 @@ -135,7 +135,7 @@ spec: name: ghost-mysql-env key: MYSQL_DATABASE - name: url - value: https://blog.hensen.io + value: https://blog.rubenhensen.nl envFrom: - secretRef: name: ghost-mail-config diff --git a/ghost-blog/ingress.yaml b/ghost-blog/ingress.yaml index 89e957c..3b2fe80 100644 --- a/ghost-blog/ingress.yaml +++ b/ghost-blog/ingress.yaml @@ -18,20 +18,9 @@ spec: ingressClassName: nginx tls: - hosts: - - blog.hensen.io - blog.rubenhensen.nl secretName: ghost-tls-secret rules: - - host: blog.hensen.io - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: ghost-service - port: - name: ghost - host: blog.rubenhensen.nl http: paths: diff --git a/home-assistant/ingress.yaml b/home-assistant/ingress.yaml index 435a34f..cfa2e8d 100644 --- a/home-assistant/ingress.yaml +++ b/home-assistant/ingress.yaml @@ -24,16 +24,6 @@ metadata: spec: ingressClassName: nginx rules: - - host: ha.hensen.io - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: home-assistant-external - port: - number: 8123 - host: ha.rubenhensen.nl http: paths: @@ -47,6 +37,5 @@ spec: tls: - secretName: letsencrypt-prod hosts: - - ha.hensen.io - ha.rubenhensen.nl diff --git a/immich/helm-immich.yaml b/immich/helm-immich.yaml index f2fd91d..ae8ec9f 100644 --- a/immich/helm-immich.yaml +++ b/immich/helm-immich.yaml @@ -101,7 +101,7 @@ spec: cert-manager.io/cluster-issuer: prod-cluster-issuer nginx.ingress.kubernetes.io/backend-protocol: "HTTP" hosts: - # - host: immich.hensen.io + # - host: immich.rubenhensen.nl # paths: # - path: "/" # - host: mbg.hensen.io @@ -118,7 +118,7 @@ spec: tls: - secretName: letsencrypt-prod hosts: - # - immich.hensen.io + # - immich.rubenhensen.nl - mbg.hensen.io - foto.scoutingmbg.nl diff --git a/lingo/lingo-ingress.yaml b/lingo/lingo-ingress.yaml index 0d1a205..6a56b9a 100644 --- a/lingo/lingo-ingress.yaml +++ b/lingo/lingo-ingress.yaml @@ -9,16 +9,6 @@ metadata: spec: ingressClassName: nginx rules: - - host: lingo.hensen.io - http: - paths: - - path: /api(/|$)(.*) - pathType: ImplementationSpecific - backend: - service: - name: lingo-api - port: - number: 8000 - host: lingo.rubenhensen.nl http: paths: @@ -32,7 +22,6 @@ spec: tls: - secretName: letsencrypt-prod hosts: - - lingo.hensen.io - lingo.rubenhensen.nl --- apiVersion: networking.k8s.io/v1 @@ -45,16 +34,6 @@ metadata: spec: ingressClassName: nginx rules: - - host: lingo.hensen.io - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: lingo-frontend - port: - number: 8001 - host: lingo.rubenhensen.nl http: paths: @@ -68,5 +47,4 @@ spec: tls: - secretName: letsencrypt-prod hosts: - - lingo.hensen.io - lingo.rubenhensen.nl diff --git a/longhorn/ingress.yaml b/longhorn/ingress.yaml index 2f68704..1fa603a 100644 --- a/longhorn/ingress.yaml +++ b/longhorn/ingress.yaml @@ -24,16 +24,6 @@ metadata: spec: ingressClassName: nginx rules: - - host: longhorn.hensen.io - http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: longhorn-frontend - port: - number: 80 - host: longhorn.rubenhensen.nl http: paths: @@ -47,5 +37,4 @@ spec: tls: - secretName: letsencrypt-prod hosts: - - longhorn.hensen.io - longhorn.rubenhensen.nl diff --git a/nas/ingress.yaml b/nas/ingress.yaml index 17131d8..dc4780e 100644 --- a/nas/ingress.yaml +++ b/nas/ingress.yaml @@ -9,7 +9,7 @@ metadata: spec: ingressClassName: nginx rules: - - host: nas.hensen.io + - host: nas.rubenhensen.nl http: paths: - path: / @@ -25,5 +25,5 @@ spec: # TLS secretName used on ClusterIssuer - secretName: letsencrypt-prod hosts: - - nas.hensen.io + - nas.rubenhensen.nl diff --git a/vault/configure-oidc.yaml b/vault/configure-oidc.yaml index 0cdd3ad..32b0e22 100644 --- a/vault/configure-oidc.yaml +++ b/vault/configure-oidc.yaml @@ -63,7 +63,6 @@ spec: oidc_client_secret="$OIDC_CLIENT_SECRET" \ default_role="default" vault write auth/oidc/role/default \ - allowed_redirect_uris="https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback" \ allowed_redirect_uris="https://vault.rubenhensen.nl/ui/vault/auth/oidc/oidc/callback" \ allowed_redirect_uris="http://localhost:8250/oidc/callback" \ user_claim="preferred_username" \ diff --git a/vault/overrides.yaml b/vault/overrides.yaml index 43d09d9..9e361a0 100644 --- a/vault/overrides.yaml +++ b/vault/overrides.yaml @@ -36,8 +36,6 @@ server: tls: - secretName: letsencrypt-prod hosts: - - vault.hensen.io - vault.rubenhensen.nl hosts: - - host: "vault.hensen.io" - host: "vault.rubenhensen.nl" diff --git a/vault/secret-store.yaml b/vault/secret-store.yaml index 45c0460..e15236d 100644 --- a/vault/secret-store.yaml +++ b/vault/secret-store.yaml @@ -5,7 +5,7 @@ metadata: spec: provider: vault: - server: "https://vault.hensen.io" + server: "https://vault.rubenhensen.nl" path: "kv" # Version is the Vault KV secret engine version. # This can be either "v1" or "v2", defaults to "v2" diff --git a/whishper/whishper-ingress.yaml b/whishper/whishper-ingress.yaml index b9b7a83..1efb774 100644 --- a/whishper/whishper-ingress.yaml +++ b/whishper/whishper-ingress.yaml @@ -24,7 +24,7 @@ metadata: spec: ingressClassName: nginx rules: - - host: alv.hensen.io + - host: alv.rubenhensen.nl http: paths: - path: / @@ -40,4 +40,4 @@ spec: # TLS secretName used on ClusterIssuer - secretName: letsencrypt-prod hosts: - - alv.hensen.io + - alv.rubenhensen.nl