homelab/infra/kubernetes/platform/traefik/middleware-internal-only.yaml at 71442a0405afc6b66f6215ca25b99898a69b1e87 - homelab - Gitea: Git with a cup of tea

lazorgurl/homelab

Files

Julia McGhee 71442a0405 Switch from homelab.local to coreworlds.io with split-horizon DNS and LAN-only access controls

- Migrate all ingress hostnames from *.homelab.local to *.coreworlds.io
- Remove broken Traefik certresolver config (cert-manager handles TLS)
- Add internal-only IP allowlist middleware for platform services
- Add IngressRoutes for ArgoCD, Grafana, Longhorn (LAN-only via middleware)
- Seal and add Cloudflare API token for cert-manager DNS-01 challenges
- Update cert-manager ClusterIssuers with real email
- Update k3s TLS SAN to k3s.coreworlds.io
- Rewrite Ubiquiti docs for single-node topology and split-horizon DNS
- Fix seal-secret.sh controller name to match Helm release
- Add UCG DNS setup script using API key auth

2026-03-20 19:21:46 +00:00

12 lines

206 B

YAML

Raw Blame History

 apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: internal-only
   namespace: platform
 spec:
   ipAllowList:
     sourceRange:
       - 192.168.1.0/24
       - 10.42.0.0/16
       - 10.43.0.0/16