uninstall acmedns - replaced by desec

This commit is contained in:
Tobias Brunner 2024-03-08 19:42:07 +01:00
parent bb0453e58a
commit bac35ac5ea
Signed by: tobru
SSH key fingerprint: SHA256:kywVhvCA+MIxL6eBgoQa+BfC/ROJqcfD2bpy1PR6Ebk
8 changed files with 1 additions and 202 deletions

View file

@ -4,7 +4,7 @@ kind: Ingress
metadata:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod-desec
# traefik.ingress.kubernetes.io/router.middlewares: kube-system-redirect-https@kubernetescrd
traefik.ingress.kubernetes.io/router.middlewares: kube-system-redirect-https@kubernetescrd
labels:
app: homeassistant
name: homeassistant

View file

@ -1,67 +0,0 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: acmedns-config
data:
config.cfg: |
[general]
listen = "0.0.0.0:5353"
# protocol, "both", "both4", "both6", "udp", "udp4", "udp6" or "tcp", "tcp4", "tcp6"
protocol = "udp"
# domain name to serve the requests off of
domain = "acmedns.tbrnt.ch"
# zone name server
nsname = "acmedns.tbrnt.ch"
# admin email address, where @ is substituted with .
nsadmin = "admin.tbrnt.ch"
# predefined records served in addition to the TXT
records = [
# domain pointing to the public IP of your acme-dns server
"acmedns.tbrnt.ch. A 5.75.253.12",
# specify that auth.example.org will resolve any *.auth.example.org records
"acmedns.tbrnt.ch. NS acmedns.tbrnt.ch.",
]
# debug messages from CORS etc
debug = false
[database]
# Database engine to use, sqlite3 or postgres
engine = "sqlite3"
# Connection string, filename for sqlite3 and postgres://$username:$password@$host/$db_name for postgres
# Please note that the default Docker image uses path /var/lib/acme-dns/acme-dns.db for sqlite3
connection = "/var/lib/acme-dns/acme-dns.db"
[api]
# listen ip eg. 127.0.0.1
ip = "0.0.0.0"
# disable registration endpoint
disable_registration = true
# listen port, eg. 443 for default HTTPS
port = "8080"
# possible values: "letsencrypt", "letsencryptstaging", "cert", "none"
tls = "none"
# only used if tls = "cert"
tls_cert_privkey = "/etc/tls/example.org/privkey.pem"
tls_cert_fullchain = "/etc/tls/example.org/fullchain.pem"
# only used if tls = "letsencrypt"
acme_cache_dir = "api-certs"
# optional e-mail address to which Let's Encrypt will send expiration notices for the API's cert
notification_email = ""
# CORS AllowOrigins, wildcards can be used
corsorigins = [
"*"
]
# use HTTP header to get the client ip
use_header = true
# header name to pull the ip address / list of ip addresses from
header_name = "X-Forwarded-For"
[logconfig]
# logging level: "error", "warning", "info" or "debug"
loglevel = "debug"
# possible values: stdout, TODO file & integrations
logtype = "stdout"
# file path for logfile TODO
# logfile = "./acme-dns.log"
# format, either "json" or "text"
logformat = "text"

View file

@ -1,40 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: acmedns
name: acmedns
spec:
replicas: 1
selector:
matchLabels:
app: acmedns
strategy:
type: Recreate
template:
metadata:
labels:
app: acmedns
spec:
containers:
- image: docker.io/joohoi/acme-dns:v1.0
name: acmedns
imagePullPolicy: IfNotPresent
ports:
- containerPort: 5353
protocol: UDP
- containerPort: 8080
protocol: TCP
name: api
volumeMounts:
- name: config
mountPath: /etc/acme-dns
- name: data
mountPath: /var/lib/acme-dns
volumes:
- name: config
configMap:
name: acmedns-config
- name: data
persistentVolumeClaim:
claimName: data

View file

@ -1,23 +0,0 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: acmedns
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: kube-system-redirect-https@kubernetescrd
spec:
rules:
- host: acmedns.tbrnt.ch
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: acmedns-api
port:
number: 8080
tls:
- hosts:
- acmedns.tbrnt.ch
secretName: ingress-cert

View file

@ -1,8 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- deployment.yaml
- configmap.yaml
- ingress.yaml
- service.yaml
- pvc.yaml

View file

@ -1,13 +0,0 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: data
labels:
app: acmedns
spec:
accessModes:
- ReadWriteOnce
volumeMode: Filesystem
resources:
requests:
storage: 1Gi

View file

@ -1,31 +0,0 @@
apiVersion: v1
kind: Service
metadata:
labels:
app: acmedns
name: acmedns-api
spec:
ports:
- name: acmedns
port: 8080
protocol: TCP
targetPort: 8080
selector:
app: acmedns
type: ClusterIP
---
apiVersion: v1
kind: Service
metadata:
labels:
app: acmedns
name: acmedns-dns
spec:
ports:
- name: dnsudp
port: 53
protocol: UDP
targetPort: 5353
selector:
app: acmedns
type: LoadBalancer

View file

@ -1,19 +0,0 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: acmedns
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: apps
source:
path: apps/zurrli/acmedns
repoURL: https://git.tbrnt.ch/tobru/gitops-zurrli.git
targetRevision: HEAD
destination:
namespace: acmedns
server: https://kubernetes.default.svc
syncPolicy:
syncOptions:
- CreateNamespace=true