diff --git a/modules/kubernetes/main.tf b/modules/kubernetes/main.tf index bda18f3b..326d0a47 100644 --- a/modules/kubernetes/main.tf +++ b/modules/kubernetes/main.tf @@ -458,10 +458,10 @@ module "jsoncrack" { tls_secret_name = var.tls_secret_name } -# module "servarr" { -# source = "./servarr" -# tls_secret_name = var.tls_secret_name -# } +module "servarr" { + source = "./servarr" + tls_secret_name = var.tls_secret_name +} # module "dnscat2" { # source = "./dnscat2" @@ -522,7 +522,3 @@ module "authentik" { postgres_password = var.authentik_postgres_password } -# module "qbittorrent" { -# source = "./qbittorrent" -# tls_secret_name = var.tls_secret_name -# } diff --git a/modules/kubernetes/servarr/main.tf b/modules/kubernetes/servarr/main.tf index ab296af8..f1d0bc59 100644 --- a/modules/kubernetes/servarr/main.tf +++ b/modules/kubernetes/servarr/main.tf @@ -1,9 +1,9 @@ variable "tls_secret_name" {} -module "readarr" { - source = "./readarr" - tls_secret_name = var.tls_secret_name -} +# module "readarr" { +# source = "./readarr" +# tls_secret_name = var.tls_secret_name +# } module "prowlarr" { source = "./prowlarr" @@ -15,7 +15,7 @@ module "qbittorrent" { tls_secret_name = var.tls_secret_name } -module "flaresolverr" { - source = "./flaresolverr" - tls_secret_name = var.tls_secret_name -} +# module "flaresolverr" { +# source = "./flaresolverr" +# tls_secret_name = var.tls_secret_name +# } diff --git a/modules/kubernetes/servarr/prowlarr/main.tf b/modules/kubernetes/servarr/prowlarr/main.tf index fd738683..1d03aed7 100644 --- a/modules/kubernetes/servarr/prowlarr/main.tf +++ b/modules/kubernetes/servarr/prowlarr/main.tf @@ -110,8 +110,13 @@ resource "kubernetes_ingress_v1" "prowlarr" { namespace = "prowlarr" annotations = { "kubernetes.io/ingress.class" = "nginx" - "nginx.ingress.kubernetes.io/auth-url" : "https://oauth2.viktorbarzin.me/oauth2/auth" - "nginx.ingress.kubernetes.io/auth-signin" : "https://oauth2.viktorbarzin.me/oauth2/start?rd=/redirect/$http_host$escaped_request_uri" + # "nginx.ingress.kubernetes.io/auth-url" : "https://oauth2.viktorbarzin.me/oauth2/auth" + # "nginx.ingress.kubernetes.io/auth-signin" : "https://oauth2.viktorbarzin.me/oauth2/start?rd=/redirect/$http_host$escaped_request_uri" + "nginx.ingress.kubernetes.io/auth-url" = "http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx" + "nginx.ingress.kubernetes.io/auth-signin" = "https://authentik.viktorbarzin.me/outpost.goauthentik.io/start?rd=$scheme%3A%2F%2F$host$escaped_request_uri" + + "nginx.ingress.kubernetes.io/auth-response-headers" = "Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid" + "nginx.ingress.kubernetes.io/auth-snippet" = "proxy_set_header X-Forwarded-Host $http_host;" } } diff --git a/modules/kubernetes/servarr/qbittorrent/main.tf b/modules/kubernetes/servarr/qbittorrent/main.tf index ff95d665..0073655c 100644 --- a/modules/kubernetes/servarr/qbittorrent/main.tf +++ b/modules/kubernetes/servarr/qbittorrent/main.tf @@ -144,8 +144,13 @@ resource "kubernetes_ingress_v1" "qbittorrent" { namespace = "qbittorrent" annotations = { "kubernetes.io/ingress.class" = "nginx" - "nginx.ingress.kubernetes.io/auth-url" : "https://oauth2.viktorbarzin.me/oauth2/auth" - "nginx.ingress.kubernetes.io/auth-signin" : "https://oauth2.viktorbarzin.me/oauth2/start?rd=/redirect/$http_host$escaped_request_uri" + # "nginx.ingress.kubernetes.io/auth-url" : "https://oauth2.viktorbarzin.me/oauth2/auth" + # "nginx.ingress.kubernetes.io/auth-signin" : "https://oauth2.viktorbarzin.me/oauth2/start?rd=/redirect/$http_host$escaped_request_uri" + "nginx.ingress.kubernetes.io/auth-url" : "http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx" + "nginx.ingress.kubernetes.io/auth-signin" : "https://authentik.viktorbarzin.me/outpost.goauthentik.io/start?rd=$scheme%3A%2F%2F$host$escaped_request_uri" + + "nginx.ingress.kubernetes.io/auth-response-headers" : "Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid" + "nginx.ingress.kubernetes.io/auth-snippet" : "proxy_set_header X-Forwarded-Host $http_host;" "nginx.ingress.kubernetes.io/proxy-body-size" : "100000m" // allow uploading .torrent files } }