feat: Expose Radicale, Paperless and FreshRSS only on Tailscale

fix: Fix flake output names

kubenix-modules/freshrss.nix

@@ -1,4 +1,4 @@
-{
+{ myLib, ... }: {
   kubernetes.resources = {
     secrets.server.stringData.adminPassword = "ref+sops://secrets/kubernetes.yaml#/freshrss/password";
 
@@ -57,6 +57,8 @@
     };
 
     services.server.spec = {
+      type = "LoadBalancer";
+      loadBalancerIP = myLib.globals.freshrssIPv4;
       selector.app = "freshrss";
 
       ports.web = {
@@ -67,13 +69,9 @@
   };
 
   lab = {
-    ingresses.web = {
-      host = "rss.kun.is";
-
-      service = {
-        name = "server";
-        portName = "web";
-      };
+    tailscaleIngresses.tailscale = {
+      host = "freshrss";
+      service.name = "server";
     };
 
     longhorn.persistentVolumeClaim.data = {

kubenix-modules/inbucket.nix

@@ -52,7 +52,6 @@
       service.name = "inbucket";
     };
 
-
     ingresses.inbucket = {
       host = "inbucket.kun.is";
       entrypoint = "localsecure";

kubenix-modules/paperless.nix

@@ -1,4 +1,4 @@
-{
+{ myLib, ... }: {
   kubernetes.resources = {
     secrets = {
       database.stringData.password = "ref+sops://secrets/kubernetes.yaml#/paperless/databasePassword";
@@ -170,6 +170,9 @@
 
     services = {
       web.spec = {
+        type = "LoadBalancer";
+        loadBalancerIP = myLib.globals.paperlessIPv4;
+
         selector = {
           app = "paperless";
           component = "web";
@@ -208,13 +211,9 @@
   };
 
   lab = {
-    ingresses.web = {
-      host = "paperless.kun.is";
-
-      service = {
-        name = "web";
-        portName = "web";
-      };
+    tailscaleIngresses.tailscale = {
+      host = "paperless";
+      service.name = "web";
     };
 
     longhorn.persistentVolumeClaim = {

kubenix-modules/radicale.nix

@@ -1,4 +1,4 @@
-{ lib, ... }: {
+{ lib, myLib, ... }: {
   kubernetes.resources = {
     configMaps.server.data = {
       users = "pim:$apr1$GUiTihkS$dDCkaUxFx/O86m6NCy/yQ.";
@@ -86,6 +86,8 @@
     };
 
     services.server.spec = {
+      type = "LoadBalancer";
+      loadBalancerIP = myLib.globals.radicaleIPv4;
       selector.app = "radicale";
 
       ports.web = {
@@ -96,13 +98,9 @@
   };
 
   lab = {
-    ingresses.web = {
-      host = "dav.kun.is";
-
-      service = {
-        name = "server";
-        portName = "web";
-      };
+    tailscaleIngresses.tailscale = {
+      host = "radicale";
+      service.name = "server";
     };
 
     longhorn.persistentVolumeClaim.data = {