Merge branch 'master' of gitea.internal.aleemhaji.com:aleem/home-netw…

…ork into tasks

Dockerfile

@@ -30,6 +30,5 @@ RUN \
 RUN \
     find /src -type f -path ".git" -prune -o \
         -iname "*.yaml" -o -iname "*.yml" | \
-    grep -v "/src/metallb.yaml" | \
-    grep -v "/src/metrics-server.yaml" | \
+    grep -vE "/src/(metallb|metrics-server|kubernetes-dashboard|calico|nginx-ingress-daemonset-external|nginx-ingress-daemonset-plus-tcp-udp-proxy)\.(yml|yaml)" | \
     xargs yamllint -d "{extends: default, rules: {document-start: disable, line-length: disable}}"

barebones-nginx/README.md

@@ -0,0 +1 @@
+Just a barebones NGINX, static serving a single website from networked storage.

barebones-nginx/external-ingress.yaml

@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ${NAME}-external
+  annotations:
+    kubernetes.io/ingress.class: "nginx-external"
+spec:
+  tls:
+    - hosts:
+        - ${NAME}.aleemhaji.com
+      secretName: external-certificate-files
+  rules:
+    - host: ${NAME}.aleemhaji.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: ${NAME}
+                port:
+                  number: 80

barebones-nginx/internal-ingress.yaml

@@ -0,0 +1,34 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ${NAME}-redirect
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    nginx.ingress.kubernetes.io/temporal-redirect: https://${NAME}.internal.aleemhaji.com
+spec:
+  rules:
+    - host: ${NAME}
+    - host: ${NAME}.home
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ${NAME}
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+spec:
+  tls:
+    - hosts:
+        - ${NAME}.internal.aleemhaji.com
+      secretName: internal-certificate-files
+  rules:
+    - host: ${NAME}.internal.aleemhaji.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: ${NAME}
+                port:
+                  number: 80

barebones-nginx/service.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ${NAME}
+  labels:
+    app: ${NAME}
+spec:
+  revisionHistoryLimit: 0
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ${NAME}
+  template:
+    metadata:
+      labels:
+        app: ${NAME}
+    spec:
+      imagePullSecrets:
+        - name: registry.internal.aleemhaji.com
+      containers:
+        - name: nginx
+          image: registry.internal.aleemhaji.com/nginx:1.27.0
+          ports:
+            - containerPort: 80
+          volumeMounts:
+            - name: site-data
+              mountPath: /usr/share/nginx/html
+      volumes:
+        - name: site-data
+          nfs:
+            server: 192.168.96.4
+            path: /mnt/main/apps/${NAME}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: ${NAME}
+  labels:
+    app: ${NAME}
+spec:
+  ports:
+    - port: 80
+      protocol: TCP
+  type: NodePort
+  selector:
+    app: ${NAME}

bitwarden/bitwarden.yaml

@@ -20,7 +20,7 @@ spec:
         - name: registry.internal.aleemhaji.com
       containers:
         - name: bitwarden
-          image: registry.internal.aleemhaji.com/vaultwarden/server:1.29.1
+          image: registry.internal.aleemhaji.com/vaultwarden/server:1.30.5
           ports:
             - containerPort: 80
           volumeMounts: