forust
bc1e69ebe0
ci / lint-prettier (push) Successful in 2s
ci / lint-ruff (push) Successful in 0s
ci / lint-yaml (push) Successful in 2s
ci / lint-dockerfiles (push) Successful in 1s
ci / validate (push) Successful in 1s
ci / build (push) Skipped
ci / deploy-userbot-panel (push) Skipped
Selfsigned root (10y) + internal-ca issuer; per-namespace internal-wildcard-tls certs referenced by all -local routers. Root public cert committed for client trust stores.
53 lines
1.0 KiB
YAML
53 lines
1.0 KiB
YAML
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: checkmk-prod
|
|
namespace: checkmk
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`cmk.forust.xyz`)
|
|
kind: Rule
|
|
middlewares:
|
|
- name: crowdsec-bouncer
|
|
namespace: crowdsec
|
|
services:
|
|
- name: checkmk-service
|
|
port: 5000
|
|
tls:
|
|
secretName: checkmk-prod-tls
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRouteTCP
|
|
metadata:
|
|
name: checkmk-agent-receiver
|
|
namespace: checkmk
|
|
spec:
|
|
entryPoints:
|
|
- checkmk-agent
|
|
routes:
|
|
- match: HostSNI(`*`)
|
|
services:
|
|
- name: checkmk-service
|
|
port: 8000
|
|
tls:
|
|
passthrough: true
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: checkmk-local
|
|
namespace: checkmk
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`cmk.workstation.internal`) || Host(`cmk.gigaforust.internal`)
|
|
kind: Rule
|
|
services:
|
|
- name: checkmk-service
|
|
port: 5000
|
|
tls:
|
|
secretName: internal-wildcard-tls
|