Fixed pasarguard internal connectivicty

2026-06-01 14:00:21 +03:00
parent a8a3bae597
commit f3b903f333
2 changed files with 21 additions and 0 deletions
@@ -46,6 +46,10 @@ spec:
              value: "8000"
            - name: DOCS
              value: "true"
+            - name: UVICORN_SSL_CERTFILE
+              value: "/app/tls/tls.crt"
+            - name: UVICORN_SSL_KEYFILE
+              value: "/app/tls/tls.key"
            - name: CUSTOM_TEMPLATES_DIRECTORY
              value: "/code/app/templates/"
            - name: SUBSCRIPTION_PAGE_TEMPLATE
@@ -55,9 +59,15 @@ spec:
              containerPort: 8000
              protocol: TCP
          volumeMounts:
+            - name: tls
+              mountPath: /app/tls
+              readOnly: true
            - name: subscription-template
              mountPath: /code/app/templates/subscription
      volumes:
+        - name: tls
+          secret:
+            secretName: pasarguard-tls
        - name: subscription-template
          emptyDir: {}
 ---
@@ -1,3 +1,12 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: ServersTransport
+metadata:
+  name: pasarguard-transport
+spec:
+  serverName: ps.hexor.cy
+  insecureSkipVerify: true
+---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
@@ -11,5 +20,7 @@ spec:
      services:
        - name: pasarguard
          port: 80
+          scheme: https
+          serversTransport: pasarguard-pasarguard-transport@kubernetescrd
  tls:
    secretName: pasarguard-tls