all repos — infra @ 1f3e5c14c9d8d3279ec75c37e9179a4ae5020397

infrastructure manifests and setup notes

apps/vaultwarden/ingress.yaml (view raw)

 1apiVersion: networking.k8s.io/v1
 2kind: Ingress
 3metadata:
 4  annotations:
 5    ingress.kubernetes.io/rewrite-target: /
 6    ingress.kubernetes.io/ssl-redirect: "true"
 7    nginx.ingress.kubernetes.io/configuration-snippet: |
 8      proxy_set_header Upgrade $http_upgrade;
 9      proxy_set_header Connection "upgrade";
10      more_set_headers "Request-Id: $req_id";      
11    nginx.ingress.kubernetes.io/connection-proxy-header: keep-alive
12    nginx.ingress.kubernetes.io/enable-cors: "true"
13    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
14    nginx.ingress.kubernetes.io/limit-connections: "25"
15    nginx.ingress.kubernetes.io/limit-rps: "15"
16    nginx.ingress.kubernetes.io/proxy-body-size: 1024m
17    nginx.ingress.kubernetes.io/proxy-connect-timeout: "10"
18    nginx.ingress.kubernetes.io/proxy-read-timeout: "1800"
19    nginx.ingress.kubernetes.io/proxy-send-timeout: "1800"
20    nginx.ingress.kubernetes.io/ssl-redirect: "true"
21  labels:
22    app.kubernetes.io/component: vaultwarden
23    app.kubernetes.io/instance: vaultwarden
24    app.kubernetes.io/name: vaultwarden
25  name: pass.koti.lan
26  namespace: default
27spec:
28  ingressClassName: nginx
29  rules:
30    - host: pass.koti.lan
31      http:
32        paths:
33          - backend:
34              service:
35                name: vaultwarden
36                port:
37                  name: http
38            path: /
39            pathType: Prefix
40  tls:
41    - hosts:
42        - pass.koti.lan
43      secretName: pass-koti-lan