improving things
This commit is contained in:
2
SETUP.md
2
SETUP.md
@@ -50,7 +50,7 @@ kubectl apply -f metallb-system/address-pool.yaml
|
|||||||
|
|
||||||
## Install cert-manager
|
## Install cert-manager
|
||||||
```bash
|
```bash
|
||||||
kubectl create namespace cert-manager
|
kubectl create ns cert-manager
|
||||||
kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.15.1/cert-manager.yaml
|
kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.15.1/cert-manager.yaml
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|||||||
@@ -67,7 +67,7 @@ spec:
|
|||||||
- port: 7575
|
- port: 7575
|
||||||
targetPort: homarr-port
|
targetPort: homarr-port
|
||||||
---
|
---
|
||||||
# 3) PersistentVolumeClaim (for /config)
|
# 3) PersistentVolumeClaim
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
@@ -83,7 +83,7 @@ spec:
|
|||||||
requests:
|
requests:
|
||||||
storage: 1Gi
|
storage: 1Gi
|
||||||
---
|
---
|
||||||
# 4) Ingress (Traefik)
|
# 4) Ingress
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
|
|||||||
@@ -44,7 +44,7 @@ spec:
|
|||||||
- port: 80
|
- port: 80
|
||||||
targetPort: 80
|
targetPort: 80
|
||||||
---
|
---
|
||||||
# 3) PersistentVolumeClaim (local storage via k3s local-path)
|
# 3) PersistentVolumeClaim
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
@@ -60,7 +60,7 @@ spec:
|
|||||||
requests:
|
requests:
|
||||||
storage: 1Gi
|
storage: 1Gi
|
||||||
---
|
---
|
||||||
# 4) Ingress (Traefik)
|
# 4) Ingress
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
|
|||||||
@@ -49,7 +49,7 @@ spec:
|
|||||||
- port: 8080
|
- port: 8080
|
||||||
targetPort: searxng-port
|
targetPort: searxng-port
|
||||||
---
|
---
|
||||||
# 3) PersistentVolumeClaim (for /config)
|
# 3) PersistentVolumeClaim
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
@@ -65,7 +65,7 @@ spec:
|
|||||||
requests:
|
requests:
|
||||||
storage: 1Gi
|
storage: 1Gi
|
||||||
---
|
---
|
||||||
# 4) Ingress (Traefik)
|
# 4) Ingress
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
|
|||||||
@@ -63,7 +63,7 @@ spec:
|
|||||||
- port: 3001
|
- port: 3001
|
||||||
targetPort: uptimekuma-port
|
targetPort: uptimekuma-port
|
||||||
---
|
---
|
||||||
# 3) PersistentVolumeClaim (for /config)
|
# 3) PersistentVolumeClaim
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
@@ -79,7 +79,7 @@ spec:
|
|||||||
requests:
|
requests:
|
||||||
storage: 1Gi
|
storage: 1Gi
|
||||||
---
|
---
|
||||||
# 4) Ingress (Traefik)
|
# 4) Ingress
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
|
|||||||
@@ -75,7 +75,7 @@ spec:
|
|||||||
requests:
|
requests:
|
||||||
storage: 1Gi
|
storage: 1Gi
|
||||||
---
|
---
|
||||||
# 4) Ingress (Traefik)
|
# 4) Ingress
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
@@ -102,7 +102,7 @@ spec:
|
|||||||
port:
|
port:
|
||||||
number: 80
|
number: 80
|
||||||
---
|
---
|
||||||
# 4) Ingress (Traefik)
|
# 4) Ingress
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
|
|||||||
@@ -4,18 +4,3 @@ kubectl create secret generic adguardhome-password \
|
|||||||
--from-literal=password='your_adguardhome_password' \
|
--from-literal=password='your_adguardhome_password' \
|
||||||
--from-literal=username='your_adguardhome_username' -n dns
|
--from-literal=username='your_adguardhome_username' -n dns
|
||||||
```
|
```
|
||||||
|
|
||||||
## Add AdGuardHome to CoreDNS configmap fallback:
|
|
||||||
1. Edit the CoreDNS configmap:
|
|
||||||
```bash
|
|
||||||
kubectl edit configmap coredns -n kube-system
|
|
||||||
```
|
|
||||||
2. Replace the `forward` line with the following:
|
|
||||||
```
|
|
||||||
forward . <ADGUARDHOME_IP> <ADGUARDHOME_IP_2>
|
|
||||||
```
|
|
||||||
This will use AdGuardHome as the primary DNS server and a secondary one as a fallback, instead of using the default Kubernetes CoreDNS server.
|
|
||||||
|
|
||||||
You may also use `/etc/resolv.conf` to forward to the node's own DNS resolver, but it depends on whether it's well configured or not. *Since it's Linux, we never know.*
|
|
||||||
|
|
||||||
Ideally, since DNS is required for fetching the container image, you would have AdGuardHome as first and then a public DNS server as second (fallback).
|
|
||||||
@@ -53,7 +53,7 @@ spec:
|
|||||||
- port: 80
|
- port: 80
|
||||||
targetPort: beszel-port
|
targetPort: beszel-port
|
||||||
---
|
---
|
||||||
# 3) PersistentVolumeClaim (for /config)
|
# 3) PersistentVolumeClaim
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
@@ -69,7 +69,7 @@ spec:
|
|||||||
requests:
|
requests:
|
||||||
storage: 1Gi
|
storage: 1Gi
|
||||||
---
|
---
|
||||||
# 4) Ingress (Traefik)
|
# 4) Ingress
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
|
|||||||
@@ -66,7 +66,7 @@ spec:
|
|||||||
- port: 8443
|
- port: 8443
|
||||||
targetPort: code-port
|
targetPort: code-port
|
||||||
---
|
---
|
||||||
# 3) PersistentVolumeClaim (for /config)
|
# 3) PersistentVolumeClaim
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: PersistentVolumeClaim
|
kind: PersistentVolumeClaim
|
||||||
metadata:
|
metadata:
|
||||||
@@ -82,7 +82,7 @@ spec:
|
|||||||
requests:
|
requests:
|
||||||
storage: 5Gi
|
storage: 5Gi
|
||||||
---
|
---
|
||||||
# 4) Ingress (Traefik)
|
# 4) Ingress
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
|
|||||||
@@ -22,7 +22,7 @@ spec:
|
|||||||
args:
|
args:
|
||||||
- "--config.file=/etc/prometheus/prometheus.yml"
|
- "--config.file=/etc/prometheus/prometheus.yml"
|
||||||
- "--storage.tsdb.path=/prometheus"
|
- "--storage.tsdb.path=/prometheus"
|
||||||
- "--storage.tsdb.retention.time=3d"
|
- "--storage.tsdb.retention.time=1d"
|
||||||
- "--web.enable-lifecycle"
|
- "--web.enable-lifecycle"
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 9090
|
- containerPort: 9090
|
||||||
|
|||||||
Reference in New Issue
Block a user