mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 22:29:09 +01:00
Ruben Hensen
abed11dbaa
foto.scoutingmbg.nl now goes straight to immich instead of through sol-auth. immich starts the Scouts Online login right away, the password login is off and the login page no longer shows the password of the shared viewing account. share-sync is on, so everyone gets every album and the group's library in their timeline. sol-auth stays deployed for now, so switching the route back is the way back.
37 lines
915 B
YAML
37 lines
915 B
YAML
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: immich
|
|
spec:
|
|
parentRefs:
|
|
- name: homelab
|
|
namespace: envoy-gateway-system
|
|
sectionName: https-foto
|
|
hostnames:
|
|
- foto.scoutingmbg.nl
|
|
# Straight to immich, which logs people in with Scouts Online through
|
|
# authentik (docs/immich-scouts-online.md).
|
|
rules:
|
|
- backendRefs:
|
|
- name: helm-immich-server
|
|
port: 2283
|
|
# No limit on the whole request, as with nginx. Envoy's default of 15s
|
|
# cuts off uploads and long-lived connections.
|
|
timeouts:
|
|
request: 0s
|
|
---
|
|
# Lets the Gateway serve the certificate cert-manager keeps in this namespace.
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: ReferenceGrant
|
|
metadata:
|
|
name: gateway-tls
|
|
spec:
|
|
from:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
namespace: envoy-gateway-system
|
|
to:
|
|
- group: ""
|
|
kind: Secret
|
|
name: letsencrypt-prod
|