mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-09-22 00:43:32 +00:00
97 lines
4.7 KiB
YAML
97 lines
4.7 KiB
YAML
# Default values for blocky (k8s-home-lab chart)
|
|
image:
|
|
repository: ghcr.io/0xerr0r/blocky
|
|
tag: v0.24
|
|
pullPolicy: IfNotPresent
|
|
controller:
|
|
replicas: 2
|
|
dnsPolicy: ClusterFirst
|
|
strategy: RollingUpdate
|
|
rollingUpdate:
|
|
maxUnavailable: 0
|
|
maxSurge: 1
|
|
env:
|
|
TZ: Europe/Paris
|
|
service:
|
|
main:
|
|
enabled: false
|
|
dns-tcp:
|
|
enabled: false
|
|
dns-udp:
|
|
enabled: true
|
|
type: LoadBalancer
|
|
loadBalancerIP: 10.2.2.3
|
|
# Cluster (not Local) so any node can forward to pods on any other node.
|
|
# Required for Cilium L2 announcement failover
|
|
externalTrafficPolicy: Cluster
|
|
ports:
|
|
dns:
|
|
port: 53
|
|
protocol: UDP
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
custom: true
|
|
spec:
|
|
tcpSocket:
|
|
port: 53
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
readiness:
|
|
enabled: true
|
|
custom: true
|
|
spec:
|
|
tcpSocket:
|
|
port: 53
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
timeoutSeconds: 3
|
|
failureThreshold: 3
|
|
startup:
|
|
enabled: true
|
|
custom: true
|
|
spec:
|
|
tcpSocket:
|
|
port: 53
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 2
|
|
timeoutSeconds: 3
|
|
failureThreshold: 30
|
|
resources:
|
|
limits:
|
|
cpu: 600m
|
|
memory: 768Mi
|
|
requests:
|
|
cpu: 200m
|
|
memory: 256Mi
|
|
# Full list of options https://github.com/0xERR0R/blocky/blob/main/docs/config.yml
|
|
config: "upstreams:\n groups:\n default:\n - 1.1.1.1\n - 1.0.0.1\n lan:\n - 10.101.207.1\n\nconditional:\n mapping:\n lan: 10.101.207.1\n cluster.local: 10.96.0.10\n\nblocking:\n allowlists:\n ads:\n - |\n dealabs.digidip.net\n s.click.aliexpress.com\n fonts.googleapis.com\n fonts.gstatic.com\n wl.spotify.com\n www.googleadservices.com\n \n denylists:\n ads:\n - https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts\n - https://adaway.org/hosts.txt\n \n clientGroupsBlock:\n default:\n - ads\n \n blockType: zeroIp\n blockTTL: 1m\n loading:\n refreshPeriod: 4h\n downloads:\n timeout: 60s\n\ncaching:\n minTime: 5m\n maxTime: 30m\n # Disable negative caching (NXDOMAIN responses) for dynamic DNS\n cacheTimeNegative: 0\n prefetching: true\n prefetchExpires: 2h\n prefetchThreshold: 5\n\nprometheus:\n enable: true\n path: /metrics\n\nports:\n dns: 53\n http: 4000\n\nbootstrapDns: tcp+udp:1.1.1.1\n\nlog:\n level: info\n format: text\n timestamp: true\n"
|
|
sops:
|
|
lastmodified: "2026-08-20T20:31:57Z"
|
|
mac: ENC[AES256_GCM,data:RsGI3l+9aiCChJLDS3HLY5V5AvHVBMPo9HZg37gNmAql2r237fBYT1D6W1i21VZtno/ylckkNPB2wcxJfHG6uh/R4SFbFcZsjCda8wgeqGDPvaTR29n0xUs/XBHxEHbOF223xLhS8x6iShX56EVJ6QPcKG47azk+/1v0TYyLs9E=,iv:RBkV4gYoecejjmVyvIX3f34ol9WFtpIiPRezVv7NfIo=,tag:nCZKJpl/T3jaFuUmhp0fzQ==,type:str]
|
|
pgp:
|
|
- created_at: "2026-08-20T20:31:57Z"
|
|
enc: |-
|
|
-----BEGIN PGP MESSAGE-----
|
|
|
|
hQIMA7uy4qQr71wiARAAkJkQQV3jR/0IYHZ0jgyvcLPV9EJQN85j5aNprps+uhRb
|
|
BDXf7tYR3jZiPDEBvg0pL2eYlP/Bh9a1fpTZ7NcCJWizI15PJXsIKzaJ2mDn776M
|
|
KaMAj0hy3kOKrmfH/Ajof9gjupJblvyQY6nqd1AlQapfdqVR4r5W6fq0iX1wuq4n
|
|
RLzTQ4zQaYfH76dRYQFrxCwleh5C2A16Z6drQukNTKjH79IDjVLJQT+7toLH3ws3
|
|
lgRUJnXCkpYY2vr8lbtmjfHI6i0g9bJFMkGlZRZ58BYhHJYcjO4JGwvZGCzgrzi8
|
|
U9Q7gIVS4Ccdog4H5pflgOUZB36Kc5pCAxE6puttEcvXV4KJnQCB2TrBpVZxswdG
|
|
/aoPKU+IYFUcxXeKKBTXtdoVWQlppqNR7aobbDhPU576SUnozV1wag4LcbZcWIt9
|
|
DLoJwX8A2bSBjNxC+XSYgK8p6r9SKeq8JucBD9dbwDK+4e1iHYhRNQNIXtEPuRFm
|
|
rAE0poTNdMeMirut4WSKy38cnb2V5lZqK9QdLk3dcs4wPxdohfUYVWmnSBzuAM/B
|
|
qePVPzfKod9Szp7uTAWWXVdbIXKt58Qn52GAkYQofjPamcumGksnQJ819v5TYo/Z
|
|
CtUMGtfi44SRPLR0vPoGgLTiYnu6jt8BUxqaRrzbv959XW8LCfm/NzY1MABuZaHS
|
|
XAGa3Zsq2bZHP2BpQuyCoL9QKYLTOtPxgxzcF3xyLuku/Qd7oo3/5NXY6ET3w4R4
|
|
aPrOhRlhOLQ00HVESc9FYjy41GT+pE/s+aa2ZXzsG3fDQb4+OTtl+b9kG9L1
|
|
=2k/e
|
|
-----END PGP MESSAGE-----
|
|
fp: DC6910268E657FF70BA7EC289974494E76938DDC
|
|
encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
|
|
version: 3.10.2
|