82 lines
2.2 KiB
Nix
82 lines
2.2 KiB
Nix
{ self, flake-utils, kubenix, nixhelm, ... }: flake-utils.lib.eachDefaultSystem
|
|
(system: {
|
|
kubenix = kubenix.packages.${system}.default.override {
|
|
specialArgs.flake = self;
|
|
|
|
module = { kubenix, ... }: {
|
|
imports = [ kubenix.modules.k8s kubenix.modules.helm ];
|
|
kubernetes.kubeconfig = "~/.kube/config";
|
|
kubenix.project = "home";
|
|
|
|
kubernetes = {
|
|
namespace = "kubenix";
|
|
|
|
resources = {
|
|
namespaces = {
|
|
kubenix = { };
|
|
|
|
metallb-system.metadata.labels = {
|
|
"pod-security.kubernetes.io/enforce" = "privileged";
|
|
"pod-security.kubernetes.io/audit" = "privileged";
|
|
"pod-security.kubernetes.io/warn" = "privileged";
|
|
};
|
|
};
|
|
|
|
|
|
deployments.cyberchef.spec = {
|
|
replicas = 3;
|
|
selector.matchLabels.app = "cyberchef";
|
|
|
|
template = {
|
|
metadata.labels.app = "cyberchef";
|
|
|
|
spec = {
|
|
containers.cyberchef = {
|
|
image = "mpepping/cyberchef";
|
|
|
|
ports = [{
|
|
containerPort = 8000;
|
|
protocol = "TCP";
|
|
}];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
services.cyberchef.spec = {
|
|
selector.app = "cyberchef";
|
|
|
|
ports = [{
|
|
protocol = "TCP";
|
|
port = 80;
|
|
targetPort = 8000;
|
|
}];
|
|
};
|
|
|
|
ingresses.cyberchef.spec = {
|
|
ingressClassName = "traefik";
|
|
|
|
rules = [{
|
|
host = "cyberchef.kun.is";
|
|
|
|
http.paths = [{
|
|
path = "/";
|
|
pathType = "Prefix";
|
|
|
|
backend.service = {
|
|
name = "cyberchef";
|
|
port.number = 80;
|
|
};
|
|
}];
|
|
}];
|
|
};
|
|
};
|
|
|
|
helm.releases.metallb = {
|
|
chart = nixhelm.chartsDerivations.${system}.metallb.metallb;
|
|
namespace = "metallb-system";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
})
|