commit ae73320646bfe7c3648cf0c3c9a753f79264cab1 parent 2b51a6011ea519556c5c800a89278ee5b2b80335 Author: MTRNord <mtrnord1@gmail.com> Date: Sat, 18 Jan 2025 16:46:09 +0100 Fix envoy? Diffstat:
| M | apps/base/envoy-gateway/release.yaml | | | 137 | +++++++++++++++++++++++++++++++++++++++++++++++-------------------------------- |
1 file changed, 81 insertions(+), 56 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml @@ -56,97 +56,122 @@ spec: load-balancer.hetzner.cloud/name: envoy load-balancer.hetzner.cloud/use-private-ip: "true" load-balancer.hetzner.cloud/uses-proxyprotocol: "false" + # no wildcards due to Envoy bug: https://github.com/envoyproxy/gateway/issues/2675#issuecomment-1960449002 listeners: - - name: http - protocol: HTTP - port: 80 + - name: https-midnightthoughts + protocol: HTTPS + hostname: "mas.midnightthoughts.space" + port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: midnightthoughts.space-tls - name: https-midnightthoughts protocol: HTTPS - hostname: "*.midnightthoughts.space" + hostname: "matrix.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: midnightthoughts.space-tls - - name: https-nordgedanken + mode: Terminate + certificateRefs: + - kind: Secret + name: midnightthoughts.space-tls + - name: https-midnightthoughts protocol: HTTPS - hostname: "*.nordgedanken.dev" + hostname: "docuseal.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: nordgedanken.dev-tls - - name: https-mtrnord-blog + mode: Terminate + certificateRefs: + - kind: Secret + name: midnightthoughts.space-tls + - name: https-midnightthoughts-neoboard protocol: HTTPS - hostname: "*.mtrnord.blog" + hostname: "miro-export.neoboard.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: mtrnord.blog-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: midnightthoughts.space-tls - name: https-midnightthoughts-root protocol: HTTPS hostname: "midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: midnightthoughts.space-tls - - name: https-midnightthoughts-neoboard + mode: Terminate + certificateRefs: + - kind: Secret + name: midnightthoughts.space-tls + - name: https-nordgedanken-root protocol: HTTPS - hostname: "*.neoboard.midnightthoughts.space" + hostname: "nordgedanken.dev" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: midnightthoughts.space-tls - - name: https-nordgedanken-root + mode: Terminate + certificateRefs: + - kind: Secret + name: nordgedanken.dev-tls + - name: https-nordgedanken protocol: HTTPS - hostname: "nordgedanken.dev" + hostname: "*.nordgedanken.dev" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: nordgedanken.dev-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: nordgedanken.dev-tls - name: https-mtrnord-blog-root protocol: HTTPS hostname: "mtrnord.blog" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: mtrnord.blog-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: mtrnord.blog-tls + - name: https-mtrnord-blog + protocol: HTTPS + hostname: "*.mtrnord.blog" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: mtrnord.blog-tls + - name: http + protocol: HTTP + port: 80 + allowedRoutes: + namespaces: + from: "All" --- apiVersion: gateway.envoyproxy.io/v1alpha1 kind: ClientTrafficPolicy