latest updates

k8s/manifests/filebrowser/traefik.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: default
 spec:
   entryPoints:
-  - web
+  - websecure
   routes:
   - kind: Rule
     match: Host(`download.vilanet.fr`)

k8s/manifests/phpmyadmin/traefik.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: default
 spec:
   entryPoints:
-  - websecure
+  - websecureadmin
   routes:
   - kind: Rule
     match: Host(`admin.vps.lan`) && PathPrefix(`/phpmyadmin`)

k8s/manifests/portainer/traefik.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: kube-system
 spec:
   entryPoints:
-  - websecure
+  - websecureadmin
   routes:
   - kind: Rule
     match: Host(`admin.vps.lan`) && PathPrefix(`/portainer{regex:$$|/.*}`)

k8s/manifests/traefik/helmchartconfig.yaml

@@ -5,11 +5,15 @@ metadata:
   namespace: kube-system
 spec:
   valuesContent: |-
+    service:
+      enabled: true
+      spec:
+        externalTrafficPolicy: Local
     ingressRoute:
       dashboard:
         matchRule: Host(`admin.vps.lan`) && (PathPrefix(`/traefik`) || HeadersRegexp(`Referer`, `.*/traefik/.*`))
         entryPoints:
-        - websecure
+        - websecureadmin
         middlewares:
         - name: traefik-dashboard-stripprefix
           namespace: kube-system
@@ -31,7 +35,34 @@ spec:
       - name: OVH_CONSUMER_KEY
         value: 58b27f2035a88d5b580ac90154107615
     ports:
+      web:
+        port: 8000
+        expose: false
+        exposedPort: 80
       websecure:
+        port: 443
+        expose: true
+        exposedPort: 443
+        proxyProtocol:
+          insecure: true
+        forwardedHeaders:
+          insecure: true
+        tls:
+          enabled: true
+          certResolver: letsencrypt
+          domains:
+          - main: vilanet.fr
+          - sans:
+            - download.vilanet.fr
+            - wiki.vilanet.fr
+      websecureadmin:
+        port: 8443
+        expose: true
+        exposedPort: 8443
+        proxyProtocol:
+          insecure: true
+        forwardedHeaders:
+          insecure: true
         tls:
           enabled: true
           options: kube-system-mutual-auth

k8s/manifests/transmission/traefik.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: default
 spec:
   entryPoints:
-  - web
+  - websecure
   routes:
   - kind: Rule
     match: Host(`download.vilanet.fr`) && PathPrefix(`/transmission`)

k8s/manifests/wordpress/traefik.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: default
 spec:
   entryPoints:
-  - web
+  - websecure
   routes:
   - kind: Rule
     match: Host(`wiki.vilanet.fr`)

k8s/manifests/wordpress/wordpress-deploy.yaml

@@ -46,7 +46,7 @@ spec:
         - name: WORDPRESS_TABLE_PREFIX
           value: wp
         image: wordpress:6
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         name: wordpress
         resources: {}
         terminationMessagePath: /dev/termination-log