feat(dnsmasq): Move to dns k8s namespace

refactor(pihole): Move to dns k8s namespace

README.md

@@ -68,6 +68,7 @@ Currently, the applications being deployed like this are:
 - `immich`
 - `attic`
 - `inbucket`
+- `dnsmasq`
 
 ## Known bugs
 

flake-parts/kubenix.nix

@@ -89,11 +89,13 @@
     kubenix.syncthing = mkDeployScriptAndManifest
       "${self}/kubenix-modules/syncthing.nix" "syncthing" "syncthing";
     kubenix.pihole = mkDeployScriptAndManifest
-      "${self}/kubenix-modules/pihole.nix" "pihole" "pihole";
+      "${self}/kubenix-modules/pihole.nix" "pihole" "dns";
     kubenix.immich = mkDeployScriptAndManifest
       "${self}/kubenix-modules/immich.nix" "immich" "immich";
     kubenix.attic = mkDeployScriptAndManifest
       "${self}/kubenix-modules/attic.nix" "attic" "attic";
     kubenix.inbucket = mkDeployScriptAndManifest
       "${self}/kubenix-modules/inbucket.nix" "inbucket" "inbucket";
+    kubenix.dnsmasq = mkDeployScriptAndManifest
+      "${self}/kubenix-modules/dnsmasq.nix" "dnsmasq" "dns";
   })

kubenix-modules/all.nix

@@ -2,7 +2,6 @@ let
   applications = [
     ./media.nix
     ./bind9
-    ./dnsmasq.nix
     # ./argo.nix
     # ./minecraft.nix
   ];

kubenix-modules/base.nix

@@ -72,10 +72,10 @@
           forgejo = { };
           paperless = { };
           syncthing = { };
-          pihole = { };
           immich = { };
           attic = { };
           inbucket = { };
+          dns = { };
         };
 
         nodes =

kubenix-modules/dnsmasq.nix

@@ -1,6 +1,5 @@
 { myLib, ... }: {
   kubernetes.resources = {
-    # TODO: generate this with nix?
     configMaps.dnsmasq-config.data.config = ''
       address=/kms.kun.is/${myLib.globals.kmsIPv4}
       address=/ssh.git.kun.is/${myLib.globals.gitIPv4}
@@ -16,33 +15,29 @@
       server=/kun.is/${myLib.globals.bind9IPv4}
     '';
 
-    deployments.dnsmasq = {
+    deployments.dnsmasq.spec = {
-      metadata.labels.app = "dnsmasq";
+      selector.matchLabels.app = "dnsmasq";
 
-      spec = {
+      template = {
-        selector.matchLabels.app = "dnsmasq";
+        metadata.labels.app = "dnsmasq";
 
-        template = {
+        spec = {
-          metadata.labels.app = "dnsmasq";
+          containers.dnsmasq = {
+            image = "dockurr/dnsmasq:2.90";
 
-          spec = {
+            ports.dns = {
-            containers.dnsmasq = {
+              containerPort = 53;
-              image = "dockurr/dnsmasq:2.90";
+              protocol = "UDP";
-
-              ports.dns = {
-                containerPort = 53;
-                protocol = "UDP";
-              };
-
-              volumeMounts = [{
-                name = "config";
-                mountPath = "/etc/dnsmasq.conf";
-                subPath = "config";
-              }];
             };
 
-            volumes.config.configMap.name = "dnsmasq-config";
+            volumeMounts = [{
+              name = "config";
+              mountPath = "/etc/dnsmasq.conf";
+              subPath = "config";
+            }];
           };
+
+          volumes.config.configMap.name = "dnsmasq-config";
         };
       };
     };

kubenix-modules/pihole.nix

@@ -44,8 +44,8 @@
           };
 
           volumes = {
-            data.persistentVolumeClaim.claimName = "data";
+            data.persistentVolumeClaim.claimName = "pihole-data";
-            dnsmasq.persistentVolumeClaim.claimName = "dnsmasq";
+            dnsmasq.persistentVolumeClaim.claimName = "pihole-dnsmasq";
           };
 
           securityContext = {
@@ -57,7 +57,7 @@
     };
 
     services = {
-      web.spec = {
+      pihole-web.spec = {
         selector.app = "pihole";
 
         ports.web = {
@@ -66,7 +66,7 @@
         };
       };
 
-      dns.spec = {
+      pihole-dns.spec = {
         type = "LoadBalancer";
         loadBalancerIP = myLib.globals.piholeIPv4;
         selector.app = "pihole";
@@ -86,18 +86,18 @@
       entrypoint = "localsecure";
 
       service = {
-        name = "web";
+        name = "pihole-web";
         portName = "web";
       };
     };
 
     longhorn.persistentVolumeClaim = {
-      data = {
+      pihole-data = {
         volumeName = "pihole-data";
         storage = "750Mi";
       };
 
-      dnsmasq = {
+      pihole-dnsmasq = {
         volumeName = "pihole-dnsmasq";
         storage = "16Mi";
       };