ab/homelab
1
1
Fork 1
Code Issues Pull Requests 153 Actions Packages Wiki Activity

Added firefly-iii
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 7s
Details
Check with kubeconform / lint (push) Successful in 6s
Details
Auto-update README / Generate README and Create MR (push) Successful in 11s
Details

Browse Source
This commit is contained in:
Ultradesu
2026-07-30 14:35:50 +01:00
parent 4273e62d68
commit dd3693095f
2 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/apps/firefly-iii/network-policy.yaml
+5 -1
View File
@@ -19,6 +19,11 @@ spec:
matchLabels: matchLabels:
app.kubernetes.io/instance: firefly-iii app.kubernetes.io/instance: firefly-iii
app.kubernetes.io/name: firefly-iii app.kubernetes.io/name: firefly-iii
# hostNetwork traffic is seen as node traffic rather than Pod traffic.
- ipBlock:
cidr: 192.168.1.117/32
- ipBlock:
cidr: 100.77.155.120/32
ports: ports:
- protocol: TCP - protocol: TCP
port: 8080 port: 8080
@@ -56,4 +61,3 @@ spec:
ports: ports:
- protocol: TCP - protocol: TCP
port: 8000 port: 8000
k8s/apps/firefly-iii/traefik-ai.yaml
+6 -2
View File
@@ -114,6 +114,8 @@ spec:
app.kubernetes.io/name: traefik-ai app.kubernetes.io/name: traefik-ai
spec: spec:
serviceAccountName: traefik-ai serviceAccountName: traefik-ai
hostNetwork: true
dnsPolicy: ClusterFirstWithHostNet
nodeSelector: nodeSelector:
kubernetes.io/hostname: ai.tail2fe2d.ts.net kubernetes.io/hostname: ai.tail2fe2d.ts.net
tolerations: tolerations:
@@ -126,7 +128,7 @@ spec:
image: rancher/mirrored-library-traefik:3.6.13 image: rancher/mirrored-library-traefik:3.6.13
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
args: args:
- --entrypoints.web.address=:8000 - --entrypoints.web.address=192.168.1.117:80
- --providers.kubernetesingress=true - --providers.kubernetesingress=true
- --providers.kubernetesingress.namespaces=firefly-iii - --providers.kubernetesingress.namespaces=firefly-iii
- --providers.kubernetesingress.ingressclass=traefik-ai - --providers.kubernetesingress.ingressclass=traefik-ai
@@ -136,7 +138,7 @@ spec:
- --log.level=INFO - --log.level=INFO
ports: ports:
- name: web - name: web
containerPort: 8000 containerPort: 80
hostPort: 80 hostPort: 80
hostIP: 192.168.1.117 hostIP: 192.168.1.117
protocol: TCP protocol: TCP
@@ -160,6 +162,8 @@ spec:
capabilities: capabilities:
drop: drop:
- ALL - ALL
add:
- NET_BIND_SERVICE
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
runAsNonRoot: true runAsNonRoot: true
runAsUser: 65532 runAsUser: 65532