diff --git a/crafty-system/crafty.yaml b/crafty-system/crafty.yaml index e5d31e1..d40ddf5 100644 --- a/crafty-system/crafty.yaml +++ b/crafty-system/crafty.yaml @@ -137,15 +137,6 @@ spec: targetPort: 8443 protocol: TCP --- -apiVersion: v1 -kind: Service -metadata: - name: ak-outpost-crafty-ptr - namespace: crafty-system -spec: - type: ExternalName - externalName: ak-outpost-crafty-outpost.auth-system.svc.cluster.local ---- #added comment for update apiVersion: networking.k8s.io/v1 kind: Ingress @@ -156,11 +147,17 @@ metadata: app.kubernetes.io/name: craftycontroller app.kubernetes.io/instance: crafty annotations: - cert-manager.io/cluster-issuer: letsencrypt-prod + cert-manager.io/cluster-issuer: letsencrypt-prod # Or your specific issuer + nginx.ingress.kubernetes.io/proxy-body-size: "0" external-dns.alpha.kubernetes.io/hostname: crafty.dooplex.hu,crafty.home - nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" - nginx.ingress.kubernetes.io/proxy-ssl-verify: "off" - nginx.ingress.kubernetes.io/ssl-redirect: 'true' + nginx.ingress.kubernetes.io/proxy-read-timeout: "3600" + nginx.ingress.kubernetes.io/proxy-send-timeout: "3600" + # Authentik proxy authentication + nginx.ingress.kubernetes.io/auth-url: "http://ak-outpost-crafty-outpost.auth-system.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx" + nginx.ingress.kubernetes.io/auth-signin: "https://crafty.dooplex.hu/outpost.goauthentik.io/start?rd=$escaped_request_uri" + nginx.ingress.kubernetes.io/auth-response-headers: "Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid" + nginx.ingress.kubernetes.io/auth-snippet: | + proxy_set_header X-Forwarded-Host $http_host; spec: ingressClassName: nginx-internal tls: @@ -175,9 +172,9 @@ spec: pathType: Prefix backend: service: - name: ak-outpost-crafty-ptr + name: craftycontroller-https port: - number: 9000 + number: 8443 - host: crafty.home http: paths: @@ -185,9 +182,9 @@ spec: pathType: Prefix backend: service: - name: ak-outpost-crafty-ptr + name: craftycontroller-https port: - number: 9000 + number: 8443 --- apiVersion: apps/v1 kind: StatefulSet