Snarf/homelab-gitops
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add dns stack manifest with technitium and pi-hole deployments

Browse Source
This commit is contained in:
Snarf
2026-11-06 09:04:02 -05:00
parent d349834550
commit 3d0d55ddee
2 changed files with 32 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
manifests/aerodrome/dns/dns-stack.yaml
View File

@@ -289,6 +289,20 @@ spec:
protocol: TCP protocol: TCP
--- ---
# ------------------------------------------------------------- # -------------------------------------------------------------
# Traefik Redirect Middleware (Root to /admin/)
# -------------------------------------------------------------
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: pihole-redirect
namespace: dns
spec:
redirectRegex:
regex: "^https?://([^/]+)/?$"
replacement: "https://${1}/admin/"
permanent: false
---
# -------------------------------------------------------------
# Traefik ForwardAuth Middleware (Authentik Outpost) # Traefik ForwardAuth Middleware (Authentik Outpost)
# ------------------------------------------------------------- # -------------------------------------------------------------
apiVersion: traefik.io/v1alpha1 apiVersion: traefik.io/v1alpha1
@@ -308,7 +322,7 @@ spec:
trustForwardHeader: true trustForwardHeader: true
--- ---
# ------------------------------------------------------------- # -------------------------------------------------------------
# Pi-hole Web Ingress (TLS + Authentik ForwardAuth) # Pi-hole Web Ingress (TLS + Authentik ForwardAuth + Root Redirect)
# ------------------------------------------------------------- # -------------------------------------------------------------
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
@@ -318,7 +332,7 @@ metadata:
annotations: annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true" traefik.ingress.kubernetes.io/router.tls: "true"
traefik.ingress.kubernetes.io/router.middlewares: dns-authentik-forwardauth@kubernetescrd traefik.ingress.kubernetes.io/router.middlewares: dns-authentik-forwardauth@kubernetescrd,dns-pihole-redirect@kubernetescrd
spec: spec:
ingressClassName: traefik ingressClassName: traefik
rules: rules:

18
manifests/spaceport/dns/dns-stack.yaml
View File

@@ -289,6 +289,20 @@ spec:
protocol: TCP protocol: TCP
--- ---
# ------------------------------------------------------------- # -------------------------------------------------------------
# Traefik Redirect Middleware (Root to /admin/)
# -------------------------------------------------------------
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: pihole-redirect
namespace: dns
spec:
redirectRegex:
regex: "^https?://([^/]+)/?$"
replacement: "https://${1}/admin/"
permanent: false
---
# -------------------------------------------------------------
# Traefik ForwardAuth Middleware (Authentik Outpost) # Traefik ForwardAuth Middleware (Authentik Outpost)
# ------------------------------------------------------------- # -------------------------------------------------------------
apiVersion: traefik.io/v1alpha1 apiVersion: traefik.io/v1alpha1
@@ -308,7 +322,7 @@ spec:
trustForwardHeader: true trustForwardHeader: true
--- ---
# ------------------------------------------------------------- # -------------------------------------------------------------
# Pi-hole Web Ingress (TLS + Authentik ForwardAuth) # Pi-hole Web Ingress (TLS + Authentik ForwardAuth + Root Redirect)
# ------------------------------------------------------------- # -------------------------------------------------------------
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
@@ -318,7 +332,7 @@ metadata:
annotations: annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true" traefik.ingress.kubernetes.io/router.tls: "true"
traefik.ingress.kubernetes.io/router.middlewares: dns-authentik-forwardauth@kubernetescrd traefik.ingress.kubernetes.io/router.middlewares: dns-authentik-forwardauth@kubernetescrd,dns-pihole-redirect@kubernetescrd
spec: spec:
ingressClassName: traefik ingressClassName: traefik
rules: rules: