k8s-lab/k3s/rpi/home-stuff/nextcloud/nextcloud.ingress.yml

53 lines
3.9 KiB
YAML
Raw Normal View History

2025-06-21 20:36:29 +00:00
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
# Same namespace as the deployment
namespace: home-stuff
# Name of the ingress (see kubectl get ingress -A)
name: nextcloud-ingress
annotations:
# < use the nginx ingress controller
kubernetes.io/ingress.class: nginx
# < communicate in https with the backend (service/pod)
nginx.ingress.kubernetes.io/backend-protocol: HTTPS
# < use letsencrypt-prod application in kubernetes to generate ssl certificate
cert-manager.io/cluster-issuer: letsencrypt-prod
nginx.ingress.kubernetes.io/proxy-body-size: 10240m
spec:
tls:
- hosts:
2025-11-15 23:49:48 +00:00
- ENC[AES256_GCM,data:NmekBJG5y2nXdiO21bTmyfT9cq4G96SZXw==,iv:rsfQ6qppS9Eac+nLC1W9aWDqPV2ZloA03ISqgN0vFEI=,tag:bKoRvdWF34Gg1Any3x1kWw==,type:comment]
- ENC[AES256_GCM,data:CviF5l2El64kid5loAtlkX39HOeg7A==,iv:WxvHIlgYo8aauj+u55bU6qjc+JuisHDpewNYTy1HW5o=,tag:VU3jheTBYuuuvMdYuG5M3A==,type:str]
#ENC[AES256_GCM,data:PvMkEe8ffi6LfXPRlxPI6JPFXMcYcX8MbUDMpECcYZK9PfkRrNf7S832r76KigObjEjOf7gyzvh8,iv:ujfeTbWVaMUQsPaUZcxK246nO+WLyLx3305e4UOa3Mo=,tag:IGPX3md+BVMHy0+9b0FCkA==,type:comment]
secretName: ENC[AES256_GCM,data:VycRg8sfKlSASmF76RWmX5Qz,iv:qaM/zdsyGoYxzYoD6fLaFC/JytccysdcvQG5oJEHRUI=,tag:1vBCkIm96qRLsG720gLW6g==,type:str]
2025-06-21 20:36:29 +00:00
rules:
2025-11-15 23:49:48 +00:00
- ENC[AES256_GCM,data:oK80+fYagGdIjB2jfgMblyTu1ynJqjuhDQ==,iv:mtIZJx6BqyTdRN+0cbSA+GuRCsyx5AZuiauuib64+S8=,tag:rYCdAvPXeE5xou8dPLwQjw==,type:comment]
- host: ENC[AES256_GCM,data:4FYbQeVom8Coxl5DoZQZ5jpWUI7oxw==,iv:WAv3NwPQoO5bFZzgmbtN8W4zqORheFp2VhcezMCeMRE=,tag:qno9XKfohXVMjfdNpa0s+A==,type:str]
2025-06-21 20:36:29 +00:00
http:
paths:
2025-11-15 23:49:48 +00:00
- ENC[AES256_GCM,data:wb5/9QyIUHSE2zgHK1DuGXHlMGwrdRatWRUclWv0tlip++m2cAJ0rj97oJ4OnHPy62SmhF6DUhdooQtAJ7EVYrDE5Pwd,iv:8ohPbHap2v+gHxadjZ6EMAM4bgTtvHDGkGw/6Dv9ADw=,tag:eSFiKfew0tpAaRkLyC8+yQ==,type:comment]
- path: ENC[AES256_GCM,data:6Q==,iv:nFgFsQ0m/StXwDjI/1pxfHzBZ96dLeKcqZZ9aXUx8go=,tag:V+yln1QwL2Y1jZNd4E3eiw==,type:str]
pathType: ENC[AES256_GCM,data:bD7vCgur,iv:qGnFRI7mLy08N94c87lXzY6K+KM4fhMXC3FqgCK9YNA=,tag:rkfL9EwL1agZSVWcY8f1Kg==,type:str]
2025-06-21 20:36:29 +00:00
backend:
service:
2025-11-15 23:49:48 +00:00
#ENC[AES256_GCM,data:cgBDRdP6GJfPp7gvtnZ6tlAj0SGVNCBa5J8dkoTw8vdY1AdG9f2Nx6FUjA8DzNa/HIWxGdvFwyY9xt7xjTvk,iv:YgVd85M+fc661KmEZlFY6xAy7LEKqMc0iG6l/Pzc0HY=,tag:Nx1bXhWJ+gPcV8mnWUBQBA==,type:comment]
name: ENC[AES256_GCM,data:64qGrdDaO6yILCdwKfCkIcg=,iv:xjxMakUTyJjJdgTJE2yEqPIX+ustQUKUOPrmy3Z4VTo=,tag:dKhKK7i66xaOrMEopI80fg==,type:str]
2025-06-21 20:36:29 +00:00
port:
2025-11-15 23:49:48 +00:00
#ENC[AES256_GCM,data:ab9Rp6FgSq0oJMMKg31lv9z7VpnFljgMdN89zo4JufIH1A0JjBYvNOJFXGKKof3Au6uDdjrb3lnAZQBG,iv:tGCe4a5GyidhcvNJ4108lsylwL5l94Wub8pwyzBzf0I=,tag:MG8darHfqrFBzmBY+HlZMA==,type:comment]
number: ENC[AES256_GCM,data:qd5R,iv:NYGsjPykJSdaK8+hRyGsH67Ol4jsphRTUr8Qz4DDggk=,tag:e8VQXqitKqGJS/d37wJjsQ==,type:int]
2025-06-21 20:36:29 +00:00
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
2025-11-15 23:49:48 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvRXdTT3RHNldSMXVMY1Z0
TEpTYnUzNm1hMUxwTEt2QzdtUFMrQjhJYUhVCmlsRUNGRFdsbnFkZjhxUTc1aUdR
eVJiMWs5WHhIN1BtOU9vWHdYREE1ZGcKLS0tIGFPV215ZXpzWCsrZGgwLzN6YlNm
YjM5QjYzeS9TNFR3NDZjcmFsTXd2YzQK00c3PU677ZWdCPKGTJIhNRbIWFfslqnf
15FjT3FEiDwrQuk98HR6eyof8w6c6R1+ejHC1PnaydUr9rUBQkEVRQ==
2025-06-21 20:36:29 +00:00
-----END AGE ENCRYPTED FILE-----
2025-11-15 23:49:48 +00:00
lastmodified: "2025-11-15T23:47:15Z"
mac: ENC[AES256_GCM,data:aqePVY+cYFYnXSiFuWXnv+W23wnHXRmB1ipJXhtbGM5TCjcLdHPDNxpFttSp3S4SPRV1DDPIxhu9QHD8ofIHewmTZ6mk0KcwzfWy7GiRLUIUKhpcgSO0kdkxJYd2sEElbZ32X2llPAejzzYGtbwKqGT/7aLIwQ0a48IRP4NdGhc=,iv:YB8H6X3siM3kVRA3IzdBDFW7rUJcaMmoHxpgb80BNwM=,tag:WUKIB87desJ6AQCcM1LAZg==,type:str]
2025-06-21 20:36:29 +00:00
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
2025-11-15 23:49:48 +00:00
version: 3.11.0