chore: Refactor

clusters/dolo/default/nginx/deployment.yaml

@@ -1,20 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: nginx-deployment
-  namespace: default
-spec:
-  selector:
-    matchLabels:
-      app: nginx
-  replicas: 3
-  template:
-    metadata:
-      labels:
-        app: nginx
-    spec:
-      containers:
-      - name: nginx
-        image: nginx:alpine
-        ports:
-        - containerPort: 80

clusters/dolo/default/nginx/service.yaml

@@ -1,13 +0,0 @@
-kind: Service
-apiVersion: v1
-metadata:
-  name: nginx
-  namespace: default
-spec:
-  selector:
-    app: nginx
-  ports:
-    - protocol: TCP
-      port: 80
-      targetPort: 80
-  type: LoadBalancer

clusters/dolo/default/podinfo/release.yaml

@@ -1,18 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: podinfo
-  namespace: default
-spec:
-  interval: 5m
-  chart:
-    spec:
-      chart: podinfo
-      version: '4.0.1'
-      sourceRef:
-        kind: HelmRepository
-        name: podinfo
-        namespace: flux-system
-      interval: 1m
-  values:
-    replicaCount: 3

clusters/dolo/default/podinfo/repository.yaml

@@ -1,8 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: podinfo
-  namespace: flux-system
-spec:
-  interval: 1m
-  url: https://stefanprodan.github.io/podinfo

clusters/dolo/flux-system/gotk-sync.yaml

@@ -1,27 +0,0 @@
-# This manifest was generated by flux. DO NOT EDIT.
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: GitRepository
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  interval: 1m0s
-  ref:
-    branch: master
-  secretRef:
-    name: flux-system
-  url: https://git.mnke.org/tony/homelab.git
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./clusters/dolo
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

clusters/dolo/flux-system/kustomization.yaml

@@ -1,5 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-- gotk-components.yaml
-- gotk-sync.yaml

clusters/dolo/kube-system/dns-configmap.yaml

@@ -1,22 +0,0 @@
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: coredns
-  namespace: kube-system
-data:
-  Corefile: |
-    .:53 {
-        errors
-        health
-        ready
-        kubernetes cluster.local in-addr.arpa ip6.arpa {
-            pods insecure
-            fallthrough in-addr.arpa ip6.arpa
-        }
-        forward . 10.0.123.123
-        cache 30
-        loop
-        reload
-        loadbalance
-    }

docker/stacks/infisical/docker-stack.yml

@@ -60,7 +60,7 @@ services:
     networks:
       - infisical
     volumes:
-      - /mnt/gfs/infisical/redis/data:/data
+      - ${REDIS_DATA_DIRECTORY:-/mnt/gfs/infisical/redis/data}:/data
 
 networks:
   infisical:

docker/stacks/vault/config.hcl

@@ -0,0 +1,11 @@
+storage "raft" {
+  path    = "/vault/file"
+  node_id = "vault-1"
+}
+
+listener "tcp" {
+  address     = "0.0.0.0:8200"
+  tls_disable = 1
+}
+
+ui = true

docker/stacks/vault/docker-stack.yml

@@ -0,0 +1,33 @@
+networks:
+  traefik:
+    external: true
+
+services:
+  vault:
+    image: "hashicorp/vault"
+    cap_add:
+      - IPC_LOCK
+    volumes:
+      # Make sure to copy the config.hcl configuration into this mountpoint
+      # first.
+      - /mnt/gfs/vault/config:/vault/config
+      - /mnt/gfs/vault/file:/vault/file
+      - /mnt/gfs/vault/logs:/vault/logs
+    environment:
+      VAULT_ADDR: "https://0.0.0.0:8200"
+      VAULT_API_ADDR: "https://${VAULT_HOST:-vault.stingray.mnke.org}:8200"
+      VAULT_CLUSTER_ADDR: "https://${VAULT_HOST:-vault.stingray.mnke.org}:8201"
+    networks:
+      - traefik
+    entrypoint:
+      - vault
+      - server
+      - -config=/vault/config/config.hcl
+    deploy:
+      labels:
+        - "traefik.enable=true"
+        - "traefik.http.routers.vault.rule=Host(`${VAULT_HOST:-vault.stingray.mnke.org}`)"
+        - "traefik.http.routers.vault.entrypoints=websecure"
+        - "traefik.http.routers.vault.tls.certresolver=letsencrypt"
+        - "traefik.http.services.vault.loadbalancer.server.port=8200"
+        - "traefik.swarm.network=traefik"