Merge pull request #1 from wahyd4/junv.me

Start using junv.me domain
2026-08-09 04:15:52 +10:00 · 2021-04-16 14:17:56 +10:00
parent 68b6c600bd 3f628347ea
commit 22cf7d3af0
13 changed files with 111 additions and 156 deletions
@@ -145,7 +145,7 @@ k apply -f minio-pv.yaml -n db

 # create secrets for longhorn

-kubectl -n media create secret generic minio --from-literal=AWS_ENDPOINTS=https://minio.home.toozhao.com --from-literal=AWS_ACCESS_KEY_ID='' --from-literal=AWS_SECRET_ACCESS_KEY=''
+kubectl -n media create secret generic minio --from-literal=AWS_ENDPOINTS=https://minio.junv.me --from-literal=AWS_ACCESS_KEY_ID='' --from-literal=AWS_SECRET_ACCESS_KEY=''

 # fill s3 bucket name for longhorn

@@ -159,3 +159,7 @@ helm upgrade --install minio -n db -f minio-values.yaml bitnami/minio --set acce
 # copy secret to another namespace

 kubectl get secret minio --namespace=db -o yaml | sed 's/namespace: db/namespace: longhorn/g' | kubectl create -f -
+
+# namecheap ddns
+
+ kubectl -n home-apps create secret generic namecheap-password --from-literal=password=xxxx
@@ -73,9 +73,9 @@ spec:
                - name: DB_USER
                  value: postgres
                - name: DB_HOST
-                  value: home.toozhao.com
+                  value: new-postgres-postgresql.db.svc.cluster.local
              command: ["/bin/sh"]
-              args: ["-c", "  =$DB_PASSWORD pg_dumpall -c -h $DB_HOST -p 32222 -U $DB_USER| gzip > /backups/postgres/dump-$(date +%Y-%m-%d_%H-%M-%S_%Z).tar.gz"]
+              args: ["-c", "  =$DB_PASSWORD pg_dumpall -c -h $DB_HOST -p 5432 -U $DB_USER| gzip > /backups/postgres/dump-$(date +%Y-%m-%d_%H-%M-%S_%Z).tar.gz"]
              volumeMounts:
                - mountPath: /backups/postgres
                  subPath: postgres
@@ -101,3 +101,42 @@ spec:
            limits:
              cpu: 40m
              memory: 128Mi
+
+---
+
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ddns-junv-me
+spec:
+  selector:
+    matchLabels:
+      app: ddns-junv-me
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: ddns-junv-me
+    spec:
+      containers:
+        - name: ddns-junv-me
+          image: joshuamorris3/namecheap-ddns-update
+          env:
+            - name: NC_DDNS_PASS
+              valueFrom:
+                secretKeyRef:
+                  name: namecheap-password
+                  key: password
+            - name: DOMAIN
+              value: junv.me
+            - name: SUBDOMAINS
+              value: "@,*"
+            - name: INTERVAL
+              value: "60s"
+          resources:
+            requests:
+              cpu: 20m
+              memory: 64Mi
+            limits:
+              cpu: 40m
+              memory: 128Mi
@@ -127,17 +127,17 @@ ingress:
    kubernetes.io/ingress.class: "nginx"
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
  path: /
  # hosts:
  #   - chart-example.local
  # tls:
  #   - hosts:
-  #     - longhorn.home.toozhao.com
+  #     - longhorn.junv.me
  #     secretName: superset-tls
  # rules:
-  #   - host: longhorn.home.toozhao.com
+  #   - host: longhorn.junv.me
  #     http:
  #       paths:
  #       - backend:
@@ -148,7 +148,7 @@ ingress:
  #         path: /
  #         pathType: Prefix

-  host: longhorn.home.toozhao.com
+  host: longhorn.junv.me

  ## Set this to true in order to enable TLS on the ingress record
  ## A side effect of this will be that the backend service will be connected at port 443
@@ -79,15 +79,15 @@ metadata:
    kubernetes.io/ingress.class: "nginx"
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
 spec:
  tls:
  - hosts:
-    - sonarr.home.toozhao.com
+    - sonarr.junv.me
    secretName: sonarr-tls
  rules:
-  - host: sonarr.home.toozhao.com
+  - host: sonarr.junv.me
    http:
      paths:
      - path: /
@@ -158,10 +158,10 @@ metadata:
 spec:
  tls:
  - hosts:
-    - plex.home.toozhao.com
+    - plex.junv.me
    secretName: plex-tls
  rules:
-  - host: plex.home.toozhao.com
+  - host: plex.junv.me
    http:
      paths:
      - pathType: Prefix
@@ -343,10 +343,10 @@ metadata:
 spec:
  tls:
  - hosts:
-    - dl.home.toozhao.com
+    - dl.junv.me
    secretName: youtube-dl-tls
  rules:
-  - host: dl.home.toozhao.com
+  - host: dl.junv.me
    http:
      paths:
      - path: /
@@ -369,10 +369,10 @@ metadata:
 spec:
  tls:
  - hosts:
-    - download.home.toozhao.com
+    - download.junv.me
    secretName: qbit-tls
  rules:
-  - host: download.home.toozhao.com
+  - host: download.junv.me
    http:
      paths:
      - path: /
@@ -384,7 +384,7 @@ spec:
              number: 80

 ---
-# Refused to send form data to 'http://cloud.home.toozhao.com/' because it violates the following Content Security Policy directive: "form-action 'self'".
+# Refused to send form data to 'http://cloud.junv.me/' because it violates the following Content Security Policy directive: "form-action 'self'".
 # It is not regression, I think, CSP directive form-action 'self' added intentionally. I suppose your problem is that nextcloud doesn't know that it was accessed through https. Maybe traefik don't add X-Forwarded-Proto header. You can try to add 'overwriteprotocol' => 'https' to your config and see if problem persists.

 apiVersion: apps/v1
@@ -518,10 +518,10 @@ metadata:
 spec:
  tls:
  - hosts:
-    - cloud.home.toozhao.com
+    - cloud.junv.me
    secretName: nextcloud-tls
  rules:
-  - host: cloud.home.toozhao.com
+  - host: cloud.junv.me
    http:
      paths:
      - path: /
@@ -614,15 +614,15 @@ metadata:
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
    nginx.ingress.kubernetes.io/proxy-body-size: 1024m
-    nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
 spec:
  tls:
  - hosts:
-    - files.home.toozhao.com
+    - files.junv.me
    secretName: files-tls
  rules:
-  - host: files.home.toozhao.com
+  - host: files.junv.me
    http:
      paths:
      - path: /
@@ -701,15 +701,15 @@ metadata:
    kubernetes.io/ingress.class: "nginx"
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
 spec:
  tls:
  - hosts:
-    - books.home.toozhao.com
+    - books.junv.me
    secretName: books-tls
  rules:
-  - host: books.home.toozhao.com
+  - host: books.junv.me
    http:
      paths:
      - path: /
@@ -18,9 +18,9 @@ ingress:
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
    nginx.ingress.kubernetes.io/proxy-body-size: 102400m
-    # nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth"
-    # nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    # nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth"
+    # nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
  path: /
-  hostname: minio.home.toozhao.com
+  hostname: minio.junv.me
  tls: true
  certManager: true
@@ -1,91 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: n8n
-  labels:
-    app: n8n
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: n8n
-  template:
-    metadata:
-      labels:
-        app: n8n
-        name: n8n
-    spec:
-      containers:
-        - name: n8n
-          image: n8nio/n8n
-          imagePullPolicy: Always
-          ports:
-            - containerPort: 5678
-              name: web
-              protocol: TCP
-          env:
-            - name: TZ
-              value: "Australia/Melbourne"
-            - name: N8N_PORT
-              value: "5678"
-          volumeMounts:
-            - name: data
-              mountPath: "/home/node/.n8n"
-          resources:
-            requests:
-              cpu: 100m
-              memory: 200Mi
-            limits:
-              cpu: 200m
-              memory: 500Mi
-      volumes:
-      - name: data
-        persistentVolumeClaim:
-          claimName: n8n
-
---
-
-apiVersion: v1
-kind: Service
-metadata:
-  name: n8n
-  labels:
-    name: n8n
-spec:
-  type: ClusterIP
-  selector:
-    app: n8n
-  ports:
-    - name: n8n
-      targetPort: web
-      port: 80
-      protocol: TCP
-
---
-
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: n8n-ingress
-  annotations:
-    kubernetes.io/ingress.class: "nginx"
-    kubernetes.io/tls-acme: "true"
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
-spec:
-  tls:
-  - hosts:
-    - n8n.home.toozhao.com
-    secretName: n8n-tls
-  rules:
-  - host: n8n.home.toozhao.com
-    http:
-      paths:
-      - backend:
-          service:
-            name: n8n
-            port:
-              number: 80
-        path: /
-        pathType: Prefix
@@ -42,15 +42,15 @@ metadata:
    kubernetes.io/ingress.class: "nginx"
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
 spec:
  tls:
  - hosts:
-    - nas.home.toozhao.com
+    - nas.junv.me
    secretName: nas-tls
  rules:
-  - host: nas.home.toozhao.com
+  - host: nas.junv.me
    http:
      paths:
      - backend:
@@ -5,8 +5,8 @@ image:
  tag: v6.1.1

 extraArgs:
-  whitelist-domain: .home.toozhao.com
-  cookie-domain: .home.toozhao.com
+  whitelist-domain: .junv.me
+  cookie-domain: .junv.me
  provider: github
  silence-ping-logging: true

@@ -19,7 +19,7 @@ ingress:
  enabled: true
  path: /
  hosts:
-    - id.home.toozhao.com
+    - id.junv.me
  annotations:
    kubernetes.io/ingress.class: nginx
    cert-manager.io/cluster-issuer: letsencrypt-prod
@@ -27,7 +27,7 @@ ingress:
  tls:
    - secretName: oauth2-proxy
      hosts:
-        - id.home.toozhao.com
+        - id.junv.me

 erviceAccount:
  enable: false
@@ -55,7 +55,7 @@ spec:
            - name: DNS2
              value: '8.8.8.8'
            - name: VIRTUAL_HOST
-              value: 'pihole.home.toozhao.com'
+              value: 'pihole.junv.me'
          volumeMounts:
            - name: configs
              mountPath: "/etc/pihole"
@@ -126,15 +126,15 @@ metadata:
    kubernetes.io/ingress.class: "nginx"
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
 spec:
  tls:
  - hosts:
-    - pihole.home.toozhao.com
+    - pihole.junv.me
    secretName: pihole-tls
  rules:
-  - host: pihole.home.toozhao.com
+  - host: pihole.junv.me
    http:
      paths:
      - backend:
@@ -6,31 +6,31 @@ metadata:
    kubernetes.io/ingress.class: "nginx"
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
 spec:
  tls:
  - hosts:
-    - grafana.home.toozhao.com
-    - prometheus.home.toozhao.com
-    - alert.home.toozhao.com
+    - grafana.junv.me
+    - prometheus.junv.me
+    - alert.junv.me
    secretName: prometheus-operator-tls
  rules:
-  - host: grafana.home.toozhao.com
+  - host: grafana.junv.me
    http:
      paths:
      - backend:
          serviceName: prometheus-grafana
          servicePort: 80
        path: /
-  - host: prometheus.home.toozhao.com
+  - host: prometheus.junv.me
    http:
      paths:
      - backend:
          serviceName: prometheus-operated
          servicePort: 9090
        path: /
-  - host: alert.home.toozhao.com
+  - host: alert.junv.me
    http:
      paths:
      - backend:
@@ -51,10 +51,10 @@ metadata:
 spec:
  tls:
  - hosts:
-    - prometheus-api.home.toozhao.com
+    - prometheus-api.junv.me
    secretName: prometheus-api-operator-tls
  rules:
-  - host: prometheus-api.home.toozhao.com
+  - host: prometheus-api.junv.me
    http:
      paths:
      - backend:
@@ -39,13 +39,16 @@ spec:
          - name: DB_CONN
            value: postgres
          - name: DB_HOST
-            value: home.toozhao.com
+            value: new-postgres-postgresql.db.svc.cluster.local
          - name: DB_PORT
-            value: "32222"
+            value: "5432"
          - name: DB_USER
            value: postgres
          - name: DB_PASS
-            value: <--->
+            valueFrom:
+                secretKeyRef:
+                  name: new-postgres-postgresql
+                  key: password
          - name: DB_DATABASE
            value: statping
          - name: NAME
@@ -69,10 +72,10 @@ metadata:
 spec:
  tls:
  - hosts:
-    - status.home.toozhao.com
+    - status.junv.me
    secretName: statping-tls
  rules:
-  - host: status.home.toozhao.com
+  - host: status.junv.me
    http:
      paths:
      - backend:
@@ -52,17 +52,17 @@ ingress:
    kubernetes.io/ingress.class: "nginx"
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/auth-url: "https://id.home.toozhao.com/oauth2/auth"
-    nginx.ingress.kubernetes.io/auth-signin: "https://id.home.toozhao.com/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
+    nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri"
  path: /
  hosts:
-    - superset.home.toozhao.com
+    - superset.junv.me
  tls:
    - hosts:
-      - superset.home.toozhao.com
+      - superset.junv.me
      secretName: superset-tls
  rules:
-    - host: superset.home.toozhao.com
+    - host: superset.junv.me
      http:
        paths:
        - backend: