viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

update tls certs; add technitium doh open without recursion for now; add dashy web

Browse source
This commit is contained in:
Viktor Barzin 2023-10-21 12:14:31 +00:00
parent fcdec1eb7a
commit 719cc3436e
6 changed files with 259 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

51
modules/kubernetes/technitium/main.tf
View file

@ -58,10 +58,17 @@ resource "kubernetes_deployment" "technitium" {
port {
container_port = 53
}
port {
container_port = 80
}
volume_mount {
mount_path = "/etc/dns"
name = "nfs-config"
}
volume_mount {
mount_path = "/etc/tls/"
name = "tls-cert"
}
}
volume {
name = "nfs-config"
@ -70,6 +77,12 @@ resource "kubernetes_deployment" "technitium" {
server = "10.0.10.15"
}
}
volume {
name = "tls-cert"
secret {
secret_name = var.tls_secret_name
}
}
}
}
}
@ -99,6 +112,11 @@ resource "kubernetes_service" "technitium-web" {
port = "5380"
protocol = "TCP"
}
port {
name = "technitium-doh"
port = "80"
protocol = "TCP"
}
}
}
@ -167,3 +185,36 @@ resource "kubernetes_ingress_v1" "technitium" {
}
}
}
resource "kubernetes_ingress_v1" "technitium-doh" {
metadata {
name = "technitium-doh-ingress"
namespace = "technitium"
annotations = {
"kubernetes.io/ingress.class" = "nginx"
}
}
spec {
tls {
hosts = ["dns.viktorbarzin.me"]
secret_name = var.tls_secret_name
}
rule {
host = "dns.viktorbarzin.me"
http {
path {
path = "/"
backend {
service {
name = "technitium-web"
port {
number = 80
}
}
}
}
}
}
}
}