Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl

apps/templates/authentik-helm.yaml

@@ -99,12 +99,10 @@ spec:
                 cert-manager.io/cluster-issuer: prod-cluster-issuer
               hosts:
                 - authentik.rubenhensen.nl
-                - authentik.hensen.io
               tls:
                 - secretName: authentik-tls
                   hosts:
                     - authentik.rubenhensen.nl
-                    - authentik.hensen.io
           worker:
             volumes:
               - name: blueprint-vault

argocd/ingress.yaml

@@ -14,16 +14,6 @@ metadata:
 spec:
   ingressClassName: nginx
   rules:
-  - host: argocd.hensen.io
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: argocd-server
-            port:
-              name: https
   - host: argocd.rubenhensen.nl
     http:
       paths:
@@ -37,6 +27,5 @@ spec:
   tls:
     - secretName:  letsencrypt-prod
       hosts:
-        - argocd.hensen.io
         - argocd.rubenhensen.nl
 

authentik/blueprint-mail-oidc.yaml

@@ -23,7 +23,7 @@ data:
           client_secret: !Env [STALWART_OIDC_CLIENT_SECRET, ""]
           redirect_uris:
             - matching_mode: strict
-              url: https://stalwart.rubenhensen.nl/login/callback
+              url: https://mail.rubenhensen.nl/login/callback
           signing_key: !Find [authentik_crypto.certificatekeypair, [name, "authentik Self-signed Certificate"]]
           property_mappings:
             - !Find [authentik_providers_oauth2.scopemapping, [managed, goauthentik.io/providers/oauth2/scope-openid]]
@@ -37,4 +37,4 @@ data:
         attrs:
           name: Stalwart Mail
           provider: !KeyOf stalwart-provider
-          meta_launch_url: https://stalwart.rubenhensen.nl
+          meta_launch_url: https://mail.rubenhensen.nl

authentik/blueprint-vault-oidc.yaml

@@ -22,8 +22,6 @@ data:
           client_id: vault
           client_secret: !Env [VAULT_OIDC_CLIENT_SECRET, ""]
           redirect_uris:
-            - matching_mode: strict
-              url: https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback
             - matching_mode: strict
               url: https://vault.rubenhensen.nl/ui/vault/auth/oidc/oidc/callback
             - matching_mode: strict
@@ -41,4 +39,4 @@ data:
         attrs:
           name: Vault
           provider: !KeyOf vault-provider
-          meta_launch_url: https://vault.hensen.io
+          meta_launch_url: https://vault.rubenhensen.nl

freshrss/ingress.yaml

@@ -9,16 +9,6 @@ metadata:
 spec:
   ingressClassName: nginx
   rules:
-  - host: rss.hensen.io
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: freshrss
-            port:
-              number: 8080
   - host: rss.rubenhensen.nl
     http:
       paths:
@@ -32,6 +22,5 @@ spec:
   tls:
     - secretName:  letsencrypt-prod
       hosts:
-        - rss.hensen.io
         - rss.rubenhensen.nl
 

ghost-blog/ghost-deployment.yaml

@@ -92,7 +92,7 @@ spec:
             - name: X-Forwarded-Proto
               value: https
             - name: Host
-              value: blog.hensen.io
+              value: blog.rubenhensen.nl
           periodSeconds: 10
           timeoutSeconds: 3
           successThreshold: 1
@@ -106,7 +106,7 @@ spec:
             - name: X-Forwarded-Proto
               value: https
             - name: Host
-              value: blog.hensen.io
+              value: blog.rubenhensen.nl
           periodSeconds: 300
           timeoutSeconds: 3
           successThreshold: 1
@@ -135,7 +135,7 @@ spec:
               name: ghost-mysql-env
               key: MYSQL_DATABASE
         - name: url
-          value: https://blog.hensen.io
+          value: https://blog.rubenhensen.nl
         envFrom:
         - secretRef:
             name: ghost-mail-config

ghost-blog/ingress.yaml

@@ -18,20 +18,9 @@ spec:
   ingressClassName: nginx
   tls:
   - hosts:
-    - blog.hensen.io
     - blog.rubenhensen.nl
     secretName: ghost-tls-secret
   rules:
-  - host: blog.hensen.io
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: ghost-service
-            port:
-              name: ghost
   - host: blog.rubenhensen.nl
     http:
       paths:

home-assistant/ingress.yaml

@@ -24,16 +24,6 @@ metadata:
 spec:
   ingressClassName: nginx
   rules:
-  - host: ha.hensen.io
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: home-assistant-external
-            port:
-              number: 8123
   - host: ha.rubenhensen.nl
     http:
       paths:
@@ -47,6 +37,5 @@ spec:
   tls:
     - secretName:  letsencrypt-prod
       hosts:
-        - ha.hensen.io
         - ha.rubenhensen.nl
 

immich/helm-immich.yaml

@@ -101,7 +101,7 @@ spec:
                   cert-manager.io/cluster-issuer: prod-cluster-issuer
                   nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
                 hosts:
-                  # - host: immich.hensen.io
+                  # - host: immich.rubenhensen.nl
                   #   paths:
                   #     - path: "/"
                   # - host: mbg.hensen.io
@@ -118,7 +118,7 @@ spec:
                 tls:
                   - secretName:  letsencrypt-prod
                     hosts:
-                      # - immich.hensen.io
+                      # - immich.rubenhensen.nl
                       - mbg.hensen.io
                       - foto.scoutingmbg.nl
 

lingo/lingo-ingress.yaml

@@ -9,16 +9,6 @@ metadata:
 spec:
   ingressClassName: nginx
   rules:
-  - host: lingo.hensen.io
-    http:
-      paths:
-      - path: /api(/|$)(.*)
-        pathType: ImplementationSpecific
-        backend:
-          service:
-            name: lingo-api
-            port:
-              number: 8000
   - host: lingo.rubenhensen.nl
     http:
       paths:
@@ -32,7 +22,6 @@ spec:
   tls:
     - secretName: letsencrypt-prod
       hosts:
-        - lingo.hensen.io
         - lingo.rubenhensen.nl
 ---
 apiVersion: networking.k8s.io/v1
@@ -45,16 +34,6 @@ metadata:
 spec:
   ingressClassName: nginx
   rules:
-  - host: lingo.hensen.io
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: lingo-frontend
-            port:
-              number: 8001
   - host: lingo.rubenhensen.nl
     http:
       paths:
@@ -68,5 +47,4 @@ spec:
   tls:
     - secretName: letsencrypt-prod
       hosts:
-        - lingo.hensen.io
         - lingo.rubenhensen.nl

longhorn/ingress.yaml

@@ -24,16 +24,6 @@ metadata:
 spec:
   ingressClassName: nginx
   rules:
-  - host: longhorn.hensen.io
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: longhorn-frontend
-            port:
-              number: 80
   - host: longhorn.rubenhensen.nl
     http:
       paths:
@@ -47,5 +37,4 @@ spec:
   tls:
     - secretName:  letsencrypt-prod
       hosts:
-        - longhorn.hensen.io
         - longhorn.rubenhensen.nl

nas/ingress.yaml

@@ -9,7 +9,7 @@ metadata:
 spec:
   ingressClassName: nginx
   rules:
-  - host: nas.hensen.io
+  - host: nas.rubenhensen.nl
     http:
       paths:
       - path: /
@@ -25,5 +25,5 @@ spec:
     # TLS secretName used on ClusterIssuer
     - secretName:  letsencrypt-prod
       hosts:
-        - nas.hensen.io
+        - nas.rubenhensen.nl
 

vault/configure-oidc.yaml

@@ -63,7 +63,6 @@ spec:
                 oidc_client_secret="$OIDC_CLIENT_SECRET" \
                 default_role="default"
               vault write auth/oidc/role/default \
-                allowed_redirect_uris="https://vault.hensen.io/ui/vault/auth/oidc/oidc/callback" \
                 allowed_redirect_uris="https://vault.rubenhensen.nl/ui/vault/auth/oidc/oidc/callback" \
                 allowed_redirect_uris="http://localhost:8250/oidc/callback" \
                 user_claim="preferred_username" \

vault/overrides.yaml

@@ -36,8 +36,6 @@ server:
       tls:
           - secretName: letsencrypt-prod
             hosts:
-              - vault.hensen.io
               - vault.rubenhensen.nl
       hosts:
-        - host: "vault.hensen.io"
         - host: "vault.rubenhensen.nl"

vault/secret-store.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   provider:
     vault:
-      server: "https://vault.hensen.io"
+      server: "https://vault.rubenhensen.nl"
       path: "kv"
       # Version is the Vault KV secret engine version.
       # This can be either "v1" or "v2", defaults to "v2"

whishper/whishper-ingress.yaml

@@ -24,7 +24,7 @@ metadata:
 spec:
   ingressClassName: nginx
   rules:
-  - host: alv.hensen.io
+  - host: alv.rubenhensen.nl
     http:
       paths:
       - path: /
@@ -40,4 +40,4 @@ spec:
     # TLS secretName used on ClusterIssuer
     - secretName:  letsencrypt-prod
       hosts:
-        - alv.hensen.io
+        - alv.rubenhensen.nl