cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 7b2a80a1e43b351f013878a9411ee90b66d96cc9
parent 9f3c01aa47505476ffc023c8038de8f75b194ec5
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed, 19 Mar 2025 12:35:42 +0100

Migrate rspamd to httproute

Diffstat:
Mapps/base/envoy-gateway/release.yaml | 12++++++++++++
Mapps/base/mailserver/release.yaml | 21++++++++++++++++++++-
2 files changed, 32 insertions(+), 1 deletion(-)

diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml @@ -322,6 +322,18 @@ spec: certificateRefs: - kind: Secret name: webhook.kubernetes.midnightthoughts.space-tls + - name: https-midnightthoughts-rspamd + protocol: HTTPS + hostname: "rspamd.midnightthoughts.space" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: rspamd.midnightthoughts.space-tls - name: https-nordgedanken-root protocol: HTTPS hostname: "nordgedanken.dev" diff --git a/apps/base/mailserver/release.yaml b/apps/base/mailserver/release.yaml @@ -200,7 +200,7 @@ spec: storageClass: ceph-filesystem rspamd: ingress: - enabled: true + enabled: false ingressClassName: traefik annotations: cert-manager.io/cluster-issuer: letsencrypt-dns @@ -370,3 +370,22 @@ spec: - backendRefs: - name: mailserver-docker-mailserver port: 993 +--- +apiVersion: gateway.networking.k8s.io/v1 +kind: HTTPRoute +metadata: + name: mailserver-docker-mailserver-rspamd + namespace: mailserver +spec: + parentRefs: + - name: envoy-gateway + namespace: envoy-gateway + hostnames: + - rspamd.midnightthoughts.space + rules: + - backendRefs: + - name: mailserver-docker-mailserver + port: 11334 + timeouts: + request: 240s + backendRequest: 0s