63 lines
1.3 KiB
Nix
63 lines
1.3 KiB
Nix
{ lib, myLib, ... }: {
|
|
kubernetes.resources = {
|
|
helmChartConfigs = {
|
|
traefik = {
|
|
# Override Traefik's service with a static load balancer IP.
|
|
# Create endpoint for HTTPS on port 444.
|
|
# Allow external name services for servers in LAN.
|
|
spec.valuesContent = lib.generators.toYAML { } {
|
|
providers.kubernetesIngress.allowExternalNameServices = true;
|
|
service.loadBalancerIP = myLib.globals.traefikIPv4;
|
|
|
|
ports = {
|
|
localsecure = {
|
|
port = 8444;
|
|
expose = true;
|
|
exposedPort = 444;
|
|
protocol = "TCP";
|
|
|
|
tls = {
|
|
enabled = true;
|
|
options = "";
|
|
certResolver = "";
|
|
domains = [ ];
|
|
};
|
|
};
|
|
|
|
web.redirectTo = "websecure";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
services.esrom.spec = {
|
|
type = "ExternalName";
|
|
externalName = "esrom.dmz";
|
|
|
|
ports.web = {
|
|
port = 80;
|
|
targetPort = 80;
|
|
};
|
|
};
|
|
};
|
|
|
|
lab.ingresses = {
|
|
ek2024 = {
|
|
host = "ek2024.kun.is";
|
|
|
|
service = {
|
|
name = "ek2024";
|
|
portName = "web";
|
|
};
|
|
};
|
|
|
|
esrom = {
|
|
host = "esrom.kun.is";
|
|
|
|
service = {
|
|
name = "esrom";
|
|
portName = "web";
|
|
};
|
|
};
|
|
};
|
|
}
|