tony/homelab
1
0
Fork 0
Code Issues12 Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Test local ip whitelist

Browse Source
This commit is contained in:
Tony Du 2025-02-12 12:19:58 -08:00
parent 60ceaa529a
commit 94c2ed4e7d
4 changed files with 4 additions and 4 deletions
dns/zones
home.mnke.org.zone
k8s
apps/ingressroutes/external
build
dns-home-mnke.yaml
templater
values.yaml
infrastructure/configs/certificates
wildcard-mnke-org.yaml

3
dns/zones/home.mnke.org.zone

@ -1,8 +1,7 @@
$ORIGIN home.mnke.org. $ORIGIN home.mnke.org.
@ 900 IN SOA dns-server. hostadmin 15 900 300 604800 900 @ 900 IN SOA dns-server. hostadmin 23 900 300 604800 900
@ 3600 IN NS dns-server. @ 3600 IN NS dns-server.
db 600 IN CNAME truenas db 600 IN CNAME truenas
nas 600 IN CNAME truenas nas 600 IN CNAME truenas
truenas 600 IN A 10.0.0.160 truenas 600 IN A 10.0.0.160
truenas-gpu 600 IN A 10.0.0.250 truenas-gpu 600 IN A 10.0.0.250
dns 600 IN A 10.0.123.123

2
k8s/apps/ingressroutes/external/build/dns-home-mnke.yaml vendored

@ -24,7 +24,7 @@ spec:
entryPoints: entryPoints:
- websecure - websecure
routes: routes:
- match: Host(`dns.home.mnke.org`) - match: Host(`dns.dolo.mnke.org`)
kind: Rule kind: Rule
middlewares: middlewares:
- name: local-allowlist - name: local-allowlist

2
k8s/apps/ingressroutes/external/templater/values.yaml vendored

@ -39,7 +39,7 @@ proxies:
- service_name: dns-home-mnke - service_name: dns-home-mnke
tls_secret_name: wildcard-mnke-org-tls tls_secret_name: wildcard-mnke-org-tls
listen_host: dns.home.mnke.org listen_host: dns.dolo.mnke.org
middlewares: middlewares:
- name: local-allowlist - name: local-allowlist
namespace: default namespace: default

1
k8s/infrastructure/configs/certificates/wildcard-mnke-org.yaml

@ -18,6 +18,7 @@ spec:
dnsNames: dnsNames:
- "mnke.org" - "mnke.org"
- "*.mnke.org" - "*.mnke.org"
- "*.home.mnke.org"
- "*.dolo.mnke.org" - "*.dolo.mnke.org"
commonName: "*.mnke.org" commonName: "*.mnke.org"
issuerRef: issuerRef: