Shahab Dogar
0d4f700b89
feat: NixOS | move cluster config to /master fix: update all stuff for office network feat: PiHole | set up DHCP server chore: Cloudflare | delete api token secret chore: remove external-dns annotations from ingressed services fix: PiHole | turn off liveness checks due to host ip fix: GiteaActions | use encrypted storage for runner fix: ElasticSearch | use encrypted volumes for storage fix: Pihole | static mac addresses all caps feat: NixOS | manual network configuration fix: NixOS | k3s cluster init point to static ip with tls-san chore: Postgres | move certificate resources into own file + reduce volume size fix: Pihole | add ingress class name sec: NixOS | remove token from git
53 lines
1.1 KiB
YAML
53 lines
1.1 KiB
YAML
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: elasticsearch-cert
|
|
namespace: elastic-system
|
|
spec:
|
|
secretName: elasticsearch-cert
|
|
privateKey:
|
|
algorithm: ECDSA
|
|
size: 384
|
|
usages:
|
|
- server auth
|
|
dnsNames:
|
|
- elastic.dogar.dev
|
|
issuerRef:
|
|
name: cloudflare-issuer
|
|
kind: ClusterIssuer
|
|
group: cert-manager.io
|
|
---
|
|
apiVersion: elasticsearch.k8s.elastic.co/v1
|
|
kind: Elasticsearch
|
|
metadata:
|
|
name: elasticsearch
|
|
namespace: elastic-system
|
|
spec:
|
|
version: 8.15.2
|
|
http:
|
|
service:
|
|
spec:
|
|
type: LoadBalancer
|
|
metadata:
|
|
annotations:
|
|
external-dns.alpha.kubernetes.io/hostname: elastic.dogar.dev
|
|
tls:
|
|
certificate:
|
|
secretName: elasticsearch-cert
|
|
nodeSets:
|
|
- name: master
|
|
count: 1
|
|
volumeClaimTemplates:
|
|
- metadata:
|
|
name: elasticsearch-data
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 10Gi
|
|
storageClassName: longhorn-crypto
|
|
config:
|
|
node.roles: ["master", "data"]
|