cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 80c14a1bc55ef56ba9c69d32a0f798ead4253d74
parent 2933f433303aee59f0dcc6dbd75d7b233188e3d3
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Mon, 23 Mar 2026 23:04:45 +0100

add more hostnames

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
Mapps/talos_cluster/envoy-gateway/gateway_settings.yaml | 96+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Mapps/talos_cluster/stalwart/ingress.yaml | 36++++++++++++++++++++++++++++++++++++
2 files changed, 132 insertions(+), 0 deletions(-)

diff --git a/apps/talos_cluster/envoy-gateway/gateway_settings.yaml b/apps/talos_cluster/envoy-gateway/gateway_settings.yaml @@ -186,6 +186,102 @@ spec: certificateRefs: - kind: Secret name: webmail.midnightthoughts.space-tls + - name: https-autoconfig-midnightthoughts + protocol: HTTPS + hostname: "autoconfig.midnightthoughts.space" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: autoconfig.midnightthoughts.space-tls + - name: https-autodiscover-midnightthoughts + protocol: HTTPS + hostname: "autodiscover.midnightthoughts.space" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: autodiscover.midnightthoughts.space-tls + - name: https-autoconfig-lists-midnightthoughts + protocol: HTTPS + hostname: "autoconfig.lists.midnightthoughts.space" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: autoconfig.lists.midnightthoughts.space-tls + - name: https-autodiscover-lists-midnightthoughts + protocol: HTTPS + hostname: "autodiscover.lists.midnightthoughts.space" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: autodiscover.lists.midnightthoughts.space-tls + - name: https-mta-sts-lists-midnightthoughts + protocol: HTTPS + hostname: "mta-sts.lists.midnightthoughts.space" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: mta-sts.lists.midnightthoughts.space-tls + - name: https-autoconfig-phorge + protocol: HTTPS + hostname: "autoconfig.phorge.mtrnord.blog" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: autoconfig.phorge.mtrnord.blog-tls + - name: https-autodiscover-phorge + protocol: HTTPS + hostname: "autodiscover.phorge.mtrnord.blog" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: autodiscover.phorge.mtrnord.blog-tls + - name: https-mta-sts-phorge + protocol: HTTPS + hostname: "mta-sts.phorge.mtrnord.blog" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: mta-sts.phorge.mtrnord.blog-tls - name: https-openpgpkey.nordgedanken.dev protocol: HTTPS hostname: "openpgpkey.nordgedanken.dev" diff --git a/apps/talos_cluster/stalwart/ingress.yaml b/apps/talos_cluster/stalwart/ingress.yaml @@ -11,9 +11,45 @@ spec: - name: envoy-gateway namespace: envoy-gateway sectionName: https-webmail-midnightthoughts + - name: envoy-gateway + namespace: envoy-gateway + sectionName: https-midnightthoughts-mta-sts + - name: envoy-gateway + namespace: envoy-gateway + sectionName: https-autoconfig-midnightthoughts + - name: envoy-gateway + namespace: envoy-gateway + sectionName: https-autodiscover-midnightthoughts + - name: envoy-gateway + namespace: envoy-gateway + sectionName: https-autoconfig-lists-midnightthoughts + - name: envoy-gateway + namespace: envoy-gateway + sectionName: https-autodiscover-lists-midnightthoughts + - name: envoy-gateway + namespace: envoy-gateway + sectionName: https-mta-sts-lists-midnightthoughts + - name: envoy-gateway + namespace: envoy-gateway + sectionName: https-autoconfig-phorge + - name: envoy-gateway + namespace: envoy-gateway + sectionName: https-autodiscover-phorge + - name: envoy-gateway + namespace: envoy-gateway + sectionName: https-mta-sts-phorge hostnames: - stalwart.nordgedanken.dev - webmail.midnightthoughts.space + - mta-sts.midnightthoughts.space + - autoconfig.midnightthoughts.space + - autodiscover.midnightthoughts.space + - autoconfig.lists.midnightthoughts.space + - autodiscover.lists.midnightthoughts.space + - mta-sts.lists.midnightthoughts.space + - autoconfig.phorge.mtrnord.blog + - autodiscover.phorge.mtrnord.blog + - mta-sts.phorge.mtrnord.blog rules: - backendRefs: - name: stalwart-mail