From c4afb2822be03af8e2df30d3f7957795dee4d8b4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=B0=8F=E9=BB=91=20=28AI=20Bot=29?= Date: Fri, 13 Feb 2026 22:28:53 +1100 Subject: [PATCH] fix: switch to nginx ingress controller with source-range whitelist --- ai/internal-ingress.yaml | 15 ++------------- 1 file changed, 2 insertions(+), 13 deletions(-) diff --git a/ai/internal-ingress.yaml b/ai/internal-ingress.yaml index 8a27710..39d0875 100644 --- a/ai/internal-ingress.yaml +++ b/ai/internal-ingress.yaml @@ -4,8 +4,8 @@ metadata: name: internal-apps namespace: ai annotations: - traefik.ingress.kubernetes.io/router.entrypoints: web - traefik.ingress.kubernetes.io/router.middlewares: ai-internal-whitelist@kubernetescrd + kubernetes.io/ingress.class: "nginx" + nginx.ingress.kubernetes.io/whitelist-source-range: "127.0.0.1/32, 192.168.1.0/24" spec: rules: - host: searxng.home-apps @@ -28,14 +28,3 @@ spec: name: jackett port: number: 80 ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: internal-whitelist - namespace: ai -spec: - ipWhiteList: - sourceRange: - - 127.0.0.1/32 - - 192.168.1.0/24