- Migrate all ingress hostnames from *.homelab.local to *.coreworlds.io - Remove broken Traefik certresolver config (cert-manager handles TLS) - Add internal-only IP allowlist middleware for platform services - Add IngressRoutes for ArgoCD, Grafana, Longhorn (LAN-only via middleware) - Seal and add Cloudflare API token for cert-manager DNS-01 challenges - Update cert-manager ClusterIssuers with real email - Update k3s TLS SAN to k3s.coreworlds.io - Rewrite Ubiquiti docs for single-node topology and split-horizon DNS - Fix seal-secret.sh controller name to match Helm release - Add UCG DNS setup script using API key auth
25 lines
490 B
YAML
25 lines
490 B
YAML
# HelmChartConfig customizes the k3s-bundled Traefik deployment
|
|
apiVersion: helm.cattle.io/v1
|
|
kind: HelmChartConfig
|
|
metadata:
|
|
name: traefik
|
|
namespace: kube-system
|
|
spec:
|
|
valuesContent: |-
|
|
ports:
|
|
web:
|
|
redirectTo:
|
|
port: websecure
|
|
websecure:
|
|
tls:
|
|
enabled: true
|
|
providers:
|
|
kubernetesCRD:
|
|
allowCrossNamespace: true
|
|
logs:
|
|
access:
|
|
enabled: true
|
|
metrics:
|
|
prometheus:
|
|
entryPoint: metrics
|