durfy/homelab-gitops
1
0
Fork 0
mirror of https://gitlab.durp.info/durfy/homelab/gitops.git synced 2026-05-09 00:31:31 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update file duplicati-ingress.yaml

Browse source
This commit is contained in:
DeveloperDurp 2023-04-10 00:54:51 +00:00
parent 8637ce9cb5
commit d3cd9998b5
1 changed files with 93 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

128
internalproxy/templates/duplicati-ingress.yaml
View file

@ -25,47 +25,105 @@ subsets:
port: 8200 port: 8200
protocol: TCP protocol: TCP
--- #---
#
#apiVersion: networking.k8s.io/v1
#kind: Ingress
#metadata:
# name: duplicati-ingress
# annotations:
# kubernetes.io/ingress.class: nginx
# cert-manager.io/cluster-issuer: letsencrypt-production
# nginx.ingress.kubernetes.io/whitelist-source-range: "192.168.0.0/16"
# nginx.ingress.kubernetes.io/auth-url: |-
# http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
# nginx.ingress.kubernetes.io/auth-signin: |-
# https://duplicati.internal.durp.info/outpost.goauthentik.io/start?rd=$escaped_request_uri
# nginx.ingress.kubernetes.io/auth-response-headers: |-
# Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
# nginx.ingress.kubernetes.io/auth-snippet: |
# proxy_set_header X-Forwarded-Host $http_host;
#spec:
# rules:
# - host: duplicati.internal.durp.info
# http:
# paths:
# - path: /
# pathType: Prefix
# backend:
# service:
# name: duplicati
# port:
# number: 8200
# - path: /outpost.goauthentik.io
# pathType: Prefix
# backend:
# service:
# name: ak-outpost-authentik-embedded-outpost
# port:
# number: 9000
# tls:
# - hosts:
# - duplicati.internal.durp.info
# secretName: duplicati-tls
apiVersion: networking.k8s.io/v1 ---
kind: Ingress
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata: metadata:
name: duplicati-ingress name: duplicati-ingress
namespace: default
annotations: annotations:
kubernetes.io/ingress.class: nginx cert-manager.io/cluster-issuer: letsencrypt-production
cert-manager.io/cluster-issuer: letsencrypt-production traefik.ingress.kubernetes.io/router.middlewares: default-auth@duplicati,auth-redirect@duplicati
nginx.ingress.kubernetes.io/whitelist-source-range: "192.168.0.0/16" traefik.ingress.kubernetes.io/auth-type: forward
nginx.ingress.kubernetes.io/auth-url: |-
http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
nginx.ingress.kubernetes.io/auth-signin: |-
https://duplicati.internal.durp.info/outpost.goauthentik.io/start?rd=$escaped_request_uri
nginx.ingress.kubernetes.io/auth-response-headers: |-
Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
nginx.ingress.kubernetes.io/auth-snippet: |
proxy_set_header X-Forwarded-Host $http_host;
spec: spec:
rules: entryPoints:
- host: duplicati.internal.durp.info - websecure
http: routes:
paths: - match: Host(`duplicati.internal.durp.info`) && PathPrefix(`/`)
- path: / kind: Rule
pathType: Prefix services:
backend: - name: duplicati
service: port:
name: duplicati name: http
port: - match: Host(`duplicati.internal.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
number: 8200 kind: Rule
- path: /outpost.goauthentik.io middlewares:
pathType: Prefix - name: default-auth
backend: - name: auth-redirect
service: services:
name: ak-outpost-authentik-embedded-outpost - name: ak-outpost-authentik-embedded-outpost
port: port:
number: 9000 name: http
tls: tls:
- hosts: secretName: duplicati-tls
- duplicati.internal.durp.info
secretName: duplicati-tls ---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: auth-duplicati-middleware
spec:
plugin:
auth:
forward:
address: http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
responseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-email
- X-authentik-name
- X-authentik-uid
authResponseHeaders:
- Set-Cookie
authHeaderName: X-Authentik-User
authResponseHeaderName: X-Authentik-User
successStatusCode: 200
failureStatusCode: 401
signoutRedirectURL: https://duplicati.internal.durp.info/outpost.goauthentik.io/start?rd=$escaped_request_uri
--- ---