63 lines
1.4 KiB
YAML
63 lines
1.4 KiB
YAML
|
---
|
||
|
|
apiVersion: cert-manager.io/v1
|
||
|
|
kind: Issuer
|
||
|
|
metadata:
|
||
|
|
namespace: longhorn-system
|
||
|
|
name: letsencrypt-prod
|
||
|
|
spec:
|
||
|
|
acme:
|
||
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
||
|
|
email: florian@nocodelytics.com
|
||
|
|
privateKeySecretRef:
|
||
|
|
name: letsencrypt-prod
|
||
|
|
solvers:
|
||
|
|
- http01:
|
||
|
|
ingress:
|
||
|
|
class: traefik
|
||
|
|
---
|
||
|
|
apiVersion: cert-manager.io/v1
|
||
|
|
kind: Certificate
|
||
|
|
metadata:
|
||
|
|
namespace: longhorn-system
|
||
|
|
name: longhorn-system
|
||
|
|
spec:
|
||
|
|
secretName: longhorn-system-net-tls
|
||
|
|
issuerRef:
|
||
|
|
name: letsencrypt-prod
|
||
|
|
kind: Issuer
|
||
|
|
commonName: longhorn.nocodelytics.com
|
||
|
|
dnsNames:
|
||
|
|
- longhorn.nocodelytics.com
|
||
|
|
---
|
||
|
|
apiVersion: networking.k8s.io/v1
|
||
|
|
kind: Ingress
|
||
|
|
metadata:
|
||
|
|
namespace: longhorn-system
|
||
|
|
name: longhorn-system-nginx-ingress
|
||
|
|
annotations:
|
||
|
|
traefik.ingress.kubernetes.io/router.middlewares: default-https-redirect@kubernetescrd,default-http-auth@kubernetescrd
|
||
|
|
|
||
|
|
spec:
|
||
|
|
rules:
|
||
|
|
- host: longhorn.nocodelytics.com
|
||
|
|
http:
|
||
|
|
paths:
|
||
|
|
- path: /
|
||
|
|
pathType: Prefix
|
||
|
|
backend:
|
||
|
|
service:
|
||
|
|
name: ssl-redirect
|
||
|
|
port:
|
||
|
|
name: use-annotation
|
||
|
|
- path: /
|
||
|
|
pathType: Prefix
|
||
|
|
backend:
|
||
|
|
service:
|
||
|
|
name: longhorn-frontend
|
||
|
|
port:
|
||
|
|
number: 80
|
||
|
|
tls:
|
||
|
|
- hosts:
|
||
|
|
- longhorn.nocodelytics.com
|
||
|
|
secretName: longhorn-system-net-tls
|