mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-10-15 19:56:15 +00:00
vhaudiquet
9629597703
The saggar-dist chart: a single-node Garage hosting the distribution bucket — public read-only website on get.saggar.dev (the host label is what Garage's vhost routing resolves the bucket from), S3 write surface staying cluster-internal for the publish workflow. Same edge path as the other saggar hosts: dns A record, cert-manager certificate, caddy route. Chart repo and packages auth carry over from the saggar release.
130 lines
4.0 KiB
YAML
130 lines
4.0 KiB
YAML
# Caddy Routes - External ConfigMap
|
|
# This file contains all route definitions, imported by the main Caddyfile.
|
|
# Edit this file to add/modify routes.
|
|
#
|
|
# Certificate files are mounted from cert-manager-managed TLS Secrets
|
|
# at /etc/caddy/certs/
|
|
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: caddy-routes
|
|
namespace: caddy
|
|
labels:
|
|
app.kubernetes.io/name: caddy
|
|
app.kubernetes.io/component: routes
|
|
data:
|
|
Caddyfile: |
|
|
vhaudiquet.fr {
|
|
tls /etc/caddy/certs/vhaudiquet-fr/tls.crt /etc/caddy/certs/vhaudiquet-fr/tls.key
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
|
|
*.vhaudiquet.fr {
|
|
tls /etc/caddy/certs/wildcard-vhaudiquet-fr/tls.crt /etc/caddy/certs/wildcard-vhaudiquet-fr/tls.key
|
|
|
|
# Kubernetes services (via Traefik)
|
|
@authentik host authentik.vhaudiquet.fr
|
|
|
|
@auth-nook host auth-nook.vhaudiquet.fr
|
|
@nook-mg host n.vhaudiquet.fr
|
|
@nook host nook.vhaudiquet.fr
|
|
@sse-nook host sse-nook.vhaudiquet.fr
|
|
@inbox-nook host inbox-nook.vhaudiquet.fr
|
|
|
|
@gitea host git.vhaudiquet.fr
|
|
|
|
@flux-wh host flux-webhook.vhaudiquet.fr
|
|
|
|
@photos host photos.vhaudiquet.fr
|
|
|
|
@umami host umami.vhaudiquet.fr
|
|
|
|
@pkgatlas host pkgatlas.vhaudiquet.fr
|
|
|
|
handle @authentik {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
handle @auth-nook {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
handle @nook-mg {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
handle @nook {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
handle @sse-nook {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
handle @inbox-nook {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
handle @gitea {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
handle @flux-wh {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
handle @photos {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
handle @umami {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
handle @pkgatlas {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
|
|
# Docker VM services (via Docker Traefik)
|
|
@alexscript host alexscript.vhaudiquet.fr
|
|
@clips host clips.vhaudiquet.fr
|
|
@jellyfin host flix.vhaudiquet.fr
|
|
|
|
handle @alexscript {
|
|
reverse_proxy 10.1.2.212:80
|
|
}
|
|
handle @clips {
|
|
reverse_proxy 10.1.2.212:80
|
|
}
|
|
handle @jellyfin {
|
|
reverse_proxy 10.1.2.212:80
|
|
}
|
|
|
|
# Stalwart WebUI (now in Kubernetes, via k8s Traefik)
|
|
@mail host mail.vhaudiquet.fr
|
|
handle @mail {
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
}
|
|
|
|
semery.fr {
|
|
tls /etc/caddy/certs/semery-fr/tls.crt /etc/caddy/certs/semery-fr/tls.key
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
|
|
buildpath.win {
|
|
tls /etc/caddy/certs/buildpath-win/tls.crt /etc/caddy/certs/buildpath-win/tls.key
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
|
|
saggar.dev {
|
|
tls /etc/caddy/certs/saggar-dev/tls.crt /etc/caddy/certs/saggar-dev/tls.key
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
|
|
api.saggar.dev {
|
|
tls /etc/caddy/certs/api-saggar-dev/tls.crt /etc/caddy/certs/api-saggar-dev/tls.key
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
|
|
docs.saggar.dev {
|
|
tls /etc/caddy/certs/docs-saggar-dev/tls.crt /etc/caddy/certs/docs-saggar-dev/tls.key
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|
|
|
|
get.saggar.dev {
|
|
tls /etc/caddy/certs/get-saggar-dev/tls.crt /etc/caddy/certs/get-saggar-dev/tls.key
|
|
reverse_proxy traefik.traefik.svc.cluster.local.:80
|
|
}
|