viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add tier to all deployments [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2026-01-10 16:28:12 +00:00
parent 1b5cbeb9c8
commit f1e9fb9afe
88 changed files with 614 additions and 106 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/kubernetes/reverse_proxy/factory/main.tf
View file

@ -37,6 +37,10 @@ variable "rybbit_site_id" {
default = null
type = string
}
variable "additional_configuration_snippet" {
default = ""
type = string
}
resource "kubernetes_service" "proxied-service" {
@ -90,6 +94,7 @@ resource "kubernetes_ingress_v1" "proxied-ingress" {
"nginx.ingress.kubernetes.io/configuration-snippet" = <<-EOF
limit_req_status 429;
limit_conn_status 429;
${var.additional_configuration_snippet}
${var.rybbit_site_id != null ? <<-JS
# Rybbit Analytics
# Only modify HTML

17
modules/kubernetes/reverse_proxy/main.tf
View file

@ -96,6 +96,23 @@ module "tp-link-gateway" {
backend_protocol = "HTTPS"
depends_on = [kubernetes_namespace.reverse-proxy]
protected = true
# Doesn't work due to 413 due to GA/authentik cookie
# additional_configuration_snippet = <<-EOF
# # 1. Try to extract the sysauth cookie and its value
# # This regex looks for 'sysauth=' followed by everything until a semicolon or end of string
# set $sysauth_only "";
# if ($http_cookie ~* "sysauth=([^;]+)") {
# set $sysauth_only "sysauth=$1";
# }
# # 2. Overwrite the Cookie header.
# # If sysauth was found, only it is sent. If not found, no cookies are sent.
# proxy_set_header Cookie $sysauth_only;
# EOF
# extra_annotations = {
# client-header-buffer-size : "16k"
# large-client-header-buffers : "4 16k"
# }
}
# https://truenas.viktorbarzin.me/