viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

remove allowed users; configure magic dns and dns servers to advertise; set prometheus monitoring annotations[ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2023-09-17 22:00:36 +00:00
parent 70f8ceef5b
commit b3dbe0c0dc
2 changed files with 10 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
modules/kubernetes/headscale/config.yaml
View file

@ -210,7 +210,8 @@ dns_config:
# List of DNS servers to expose to clients. # List of DNS servers to expose to clients.
nameservers: nameservers:
- 1.1.1.1 - "10.0.20.101"
- "1.1.1.1"
# NextDNS (see https://tailscale.com/kb/1218/nextdns/). # NextDNS (see https://tailscale.com/kb/1218/nextdns/).
# "abc123" is example NextDNS ID, replace with yours. # "abc123" is example NextDNS ID, replace with yours.
@ -235,7 +236,7 @@ dns_config:
# - 8.8.8.8 # - 8.8.8.8
# Search domains to inject. # Search domains to inject.
domains: [] domains: ["viktorbarzin.lan"]
# Extra DNS records # Extra DNS records
# so far only A-records are supported (on the tailscale side) # so far only A-records are supported (on the tailscale side)
@ -256,7 +257,7 @@ dns_config:
# `base_domain` must be a FQDNs, without the trailing dot. # `base_domain` must be a FQDNs, without the trailing dot.
# The FQDN of the hosts will be # The FQDN of the hosts will be
# `hostname.user.base_domain` (e.g., _myhost.myuser.example.com_). # `hostname.user.base_domain` (e.g., _myhost.myuser.example.com_).
base_domain: example.com base_domain: viktorbarzin.lan
# Unix socket used for the CLI to connect without authentication # Unix socket used for the CLI to connect without authentication
# Note: for production you will want to set this to something like: # Note: for production you will want to set this to something like:

6
upgrade-k8s.sh Normal file
View file

@ -0,0 +1,6 @@
#!/usr/bin/env bash
VERSION=$1
sudo apt update
sudo apt upgrade kubeadm=$1