refactor: consolidate kubernetes categories

2026-09-22 00:43:32 +00:00 · 2026-08-09 19:58:18 +02:00
parent 434c1aa51e
commit 88146579c0
83 changed files with 37 additions and 34 deletions
@@ -0,0 +1,95 @@
+# Caddy Routes - External ConfigMap
+# This file contains all route definitions, imported by the main Caddyfile.
+# Edit this file to add/modify routes.
+#
+# Certificate files are mounted from cert-manager-managed TLS Secrets
+# at /etc/caddy/certs/
+
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: caddy-routes
+  namespace: caddy
+  labels:
+    app.kubernetes.io/name: caddy
+    app.kubernetes.io/component: routes
+data:
+  Caddyfile: |
+    vhaudiquet.fr {
+      tls /etc/caddy/certs/vhaudiquet-fr/tls.crt /etc/caddy/certs/vhaudiquet-fr/tls.key
+      reverse_proxy traefik.traefik.svc.cluster.local.:80
+    }
+
+    *.vhaudiquet.fr {
+        tls /etc/caddy/certs/wildcard-vhaudiquet-fr/tls.crt /etc/caddy/certs/wildcard-vhaudiquet-fr/tls.key
+
+        # Kubernetes services (via Traefik)
+        @authentik   host authentik.vhaudiquet.fr
+
+        @auth-nook   host auth-nook.vhaudiquet.fr
+        @nook-mg     host n.vhaudiquet.fr
+        @nook        host nook.vhaudiquet.fr
+        @sse-nook    host sse-nook.vhaudiquet.fr
+
+        @gitea       host git.vhaudiquet.fr
+
+        @flux-wh     host flux-webhook.vhaudiquet.fr
+
+        @umami       host umami.vhaudiquet.fr
+
+        handle @authentik {
+            reverse_proxy traefik.traefik.svc.cluster.local.:80
+        }
+        handle @auth-nook {
+            reverse_proxy traefik.traefik.svc.cluster.local.:80
+        }
+        handle @nook-mg {
+            reverse_proxy traefik.traefik.svc.cluster.local.:80
+        }
+        handle @nook {
+            reverse_proxy traefik.traefik.svc.cluster.local.:80
+        }
+        handle @sse-nook {
+            reverse_proxy traefik.traefik.svc.cluster.local.:80
+        }
+        handle @gitea {
+            reverse_proxy traefik.traefik.svc.cluster.local.:80
+        }
+        handle @flux-wh {
+            reverse_proxy traefik.traefik.svc.cluster.local.:80
+        }
+        handle @umami {
+            reverse_proxy traefik.traefik.svc.cluster.local.:80
+        }
+
+        # Docker VM services (via Docker Traefik)
+        @alexscript     host alexscript.vhaudiquet.fr
+        @clips          host clips.vhaudiquet.fr
+        @jellyfin       host flix.vhaudiquet.fr
+
+        handle @alexscript {
+            reverse_proxy 10.1.2.212:80
+        }
+        handle @clips {
+            reverse_proxy 10.1.2.212:80
+        }
+        handle @jellyfin {
+            reverse_proxy 10.1.2.212:80
+        }
+
+        # Stalwart WebUI (now in Kubernetes, via k8s Traefik)
+        @mail           host mail.vhaudiquet.fr
+        handle @mail {
+            reverse_proxy traefik.traefik.svc.cluster.local.:80
+        }
+    }
+
+    semery.fr {
+      tls /etc/caddy/certs/semery-fr/tls.crt /etc/caddy/certs/semery-fr/tls.key
+      reverse_proxy 10.1.2.212:80
+    }
+
+    buildpath.win {
+      tls /etc/caddy/certs/buildpath-win/tls.crt /etc/caddy/certs/buildpath-win/tls.key
+      reverse_proxy 10.1.2.212:80
+    }