ivanch/haven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

small changes

Browse Source
This commit is contained in:
Jose Henrique
2026-07-17 21:13:08 -03:00
parent 2d29bddfcd
commit 15c597406a
2 changed files with 87 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files

129
infra/wg-easy.yaml
View File

@@ -33,56 +33,59 @@ spec:
affinity: affinity:
nodeAffinity: nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution: preferredDuringSchedulingIgnoredDuringExecution:
- weight: 100 - weight: 100
preference: preference:
matchExpressions: matchExpressions:
- key: kubernetes.io/hostname - key: kubernetes.io/hostname
operator: In operator: In
values: values:
- nexus - nexus
containers: containers:
- name: wg-easy - name: wg-easy
image: ghcr.io/wg-easy/wg-easy:latest image: ghcr.io/wg-easy/wg-easy:latest
imagePullPolicy: Always imagePullPolicy: Always
ports: ports:
- containerPort: 51820 - containerPort: 51820
protocol: UDP protocol: UDP
name: wg-port name: wg-port
- containerPort: 51821 - containerPort: 51821
protocol: TCP protocol: TCP
name: web-port name: web-port
env: env:
- name: LANG - name: LANG
value: en value: en
- name: WG_HOST - name: WG_HOST
value: vpn.ivanch.me value: vpn.ivanch.me
- name: WG_MTU - name: WG_MTU
value: "1420" value: "1420"
- name: UI_TRAFFIC_STATS - name: UI_TRAFFIC_STATS
value: "true" value: "true"
- name: UI_CHART_TYPE - name: UI_CHART_TYPE
value: "0" value: "0"
- name: WG_ENABLE_ONE_TIME_LINKS - name: WG_ENABLE_ONE_TIME_LINKS
value: "true" value: "true"
- name: UI_ENABLE_SORT_CLIENTS - name: UI_ENABLE_SORT_CLIENTS
value: "true" value: "true"
securityContext: securityContext:
capabilities: capabilities:
add: add:
- NET_ADMIN - NET_ADMIN
- SYS_MODULE - SYS_MODULE
resources: resources:
requests: requests:
cpu: 100m cpu: 100m
memory: 256Mi memory: 256Mi
volumeMounts: limits:
cpu: 2000m
memory: 1Gi
volumeMounts:
- name: wg-easy-volume - name: wg-easy-volume
mountPath: /etc/wireguard mountPath: /etc/wireguard
restartPolicy: Always restartPolicy: Always
volumes: volumes:
- name: wg-easy-volume - name: wg-easy-volume
persistentVolumeClaim: persistentVolumeClaim:
claimName: wg-easy-pvc claimName: wg-easy-pvc
--- ---
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
@@ -95,14 +98,14 @@ spec:
app: wg-easy app: wg-easy
loadBalancerIP: 192.168.20.203 loadBalancerIP: 192.168.20.203
ports: ports:
- name: wg-port - name: wg-port
port: 51820 port: 51820
targetPort: 51820 targetPort: 51820
protocol: UDP protocol: UDP
- name: web-port - name: web-port
port: 51821 port: 51821
targetPort: 51821 targetPort: 51821
protocol: TCP protocol: TCP
--- ---
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
@@ -112,13 +115,13 @@ metadata:
spec: spec:
ingressClassName: nginx ingressClassName: nginx
rules: rules:
- host: vpn.haven - host: vpn.haven
http: http:
paths: paths:
- path: / - path: /
pathType: Prefix pathType: Prefix
backend: backend:
service: service:
name: wg-easy-svc name: wg-easy-svc
port: port:
number: 51821 number: 51821

21
secrets/gitea-runner.yaml Normal file
View File

@@ -0,0 +1,21 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata: { name: gitea-runner, namespace: dev }
spec:
refreshInterval: 1h
target:
name: gitea-runner-token
deletionPolicy: Retain
template:
type: Opaque
data:
REGISTRATION_TOKEN: "{{ .REGISTRATION_TOKEN }}"
data:
- secretKey: REGISTRATION_TOKEN
remoteRef:
{
key: 4e286657-b5de-4354-be2e-d1649b0fd527,
property: REGISTRATION_TOKEN,
}
sourceRef:
{ storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } }