Initial commit

2022-12-27 14:49:22 +01:00
commit 4216a7dc09
8 changed files with 444 additions and 0 deletions
@@ -0,0 +1,33 @@
+http:
+  routers:
+    minibeielidev-web:
+      entrypoints:
+      - websecure
+      tls:
+        certresolver: "myresolver"
+        domains:
+          - main: "dev.mini-beieli.ch"
+      rule: "Host(`dev.mini-beieli.ch`)"
+      service: minibeielidev-web
+
+    minibeielidev-lorahandler:
+      entrypoints:
+      - websecure
+      tls:
+        certresolver: "myresolver"
+        domains:
+          - main: "dev.mini-beieli.ch"
+      rule: "Host(`dev.mini-beieli.ch`) && PathPrefix(`/lorahandler`)"
+      service: minibeielidev-lorahandler
+
+  services:
+    minibeielidev-web:
+      loadBalancer:
+        servers:
+        - url: http://127.0.0.1:9050/
+        passHostHeader: true
+    minibeielidev-lorahandler:
+      loadBalancer:
+        servers:
+        - url: http://127.0.0.1:9051/
+        passHostHeader: true
@@ -0,0 +1,20 @@
+tls:
+  options:
+    default:
+      sniStrict: true
+      minVersion: VersionTLS12
+      cipherSuites:
+       - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+       - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+       - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+       - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+       - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+       - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
+    tlsv13only:
+      minVersion: VersionTLS13
+  stores:
+    default:
+      defaultGeneratedCert:
+        resolver: myresolver
+        domain:
+          main: onyx-dev.nbit.ch
@@ -0,0 +1,33 @@
+http:
+  routers:
+    wobischdev-web:
+      entrypoints:
+      - websecure
+      tls:
+        certresolver: "myresolver"
+        domains:
+          - main: "dev.wo-bisch.ch"
+      rule: "Host(`dev.wo-bisch.ch`)"
+      service: wobischdev-web
+
+    wobischdev-lorahandler:
+      entrypoints:
+      - websecure
+      tls:
+        certresolver: "myresolver"
+        domains:
+          - main: "dev.wo-bisch.ch"
+      rule: "Host(`dev.wo-bisch.ch`) && PathPrefix(`/lorahandler`)"
+      service: wobischdev-lorahandler
+
+  services:
+    wobischdev-web:
+      loadBalancer:
+        servers:
+        - url: http://127.0.0.1:9040/
+        passHostHeader: true
+    wobischdev-lorahandler:
+      loadBalancer:
+        servers:
+        - url: http://127.0.0.1:9041/
+        passHostHeader: true
@@ -0,0 +1,56 @@
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  annotations:
+    bind-mount-options:/home/containers/onyx-dev_pods/traefik/configuration: z
+    bind-mount-options:/data/traefik/acme.json: z
+    io.kubernetes.cri-o.TTY/traefik: "false"
+    io.podman.annotations.autoremove/traefik: "FALSE"
+    io.podman.annotations.init/traefik: "FALSE"
+    io.podman.annotations.label/traefik: type:container_runtime_t
+    io.podman.annotations.privileged/traefik: "FALSE"
+    io.podman.annotations.publish-all/traefik: "FALSE"
+  creationTimestamp: "2022-12-03T15:45:41Z"
+  labels:
+    app: traefik-pod
+  name: traefik-pod
+spec:
+  hostNetwork: true
+  containers:
+  - args:
+    - --entrypoints.web.address=:80
+    - --entrypoints.web.http.redirections.entryPoint.to=websecure
+    - --entrypoints.web.http.redirections.entryPoint.scheme=https
+    - --entrypoints.websecure.address=:443
+    - --certificatesresolvers.myresolver.acme.email=postmaster@nbit.ch
+    - --certificatesresolvers.myresolver.acme.storage=/acme.json
+    - --certificatesresolvers.myresolver.acme.tlschallenge=true
+    - --certificatesresolvers.myresolver.acme.httpChallenge.entrypoint=web
+    - --providers.file.directory=/configuration/
+    - --providers.file.watch=true
+    - --accesslog=true
+    #- --log.level=DEBUG
+    #- --api.dashboard=true
+    #- --api.insecure=true
+    image: docker.io/library/traefik:latest
+    name: traefik
+    securityContext:
+      capabilities:
+        drop:
+        - CAP_MKNOD
+        - CAP_AUDIT_WRITE
+    volumeMounts:
+    - mountPath: /configuration/
+      name: home-containers-onyx-dev_pods-traefik-configuration-host-0
+    - mountPath: /acme.json
+      name: data-traefik-acme.json-host-2
+  volumes:
+  - hostPath:
+      path: /home/containers/onyx-dev_pods/traefik/configuration
+      type: Directory
+    name: home-containers-onyx-dev_pods-traefik-configuration-host-0
+  - hostPath:
+      path: /data/traefik/acme.json
+      type: File
+    name: data-traefik-acme.json-host-2