Compare commits
	
		
			1 Commits
		
	
	
		
			868fdce461
			...
			main
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
| eb6b3108e0 | 
							
								
								
									
										2
									
								
								SETUP.md
									
									
									
									
									
								
							
							
						
						
									
										2
									
								
								SETUP.md
									
									
									
									
									
								
							@@ -50,7 +50,7 @@ kubectl apply -f metallb-system/address-pool.yaml
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
## Install cert-manager
 | 
					## Install cert-manager
 | 
				
			||||||
```bash
 | 
					```bash
 | 
				
			||||||
kubectl create namespace cert-manager
 | 
					kubectl create ns cert-manager
 | 
				
			||||||
kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.15.1/cert-manager.yaml
 | 
					kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.15.1/cert-manager.yaml
 | 
				
			||||||
```
 | 
					```
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -67,7 +67,7 @@ spec:
 | 
				
			|||||||
    - port: 7575
 | 
					    - port: 7575
 | 
				
			||||||
      targetPort: homarr-port
 | 
					      targetPort: homarr-port
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 3) PersistentVolumeClaim (for /config)
 | 
					# 3) PersistentVolumeClaim
 | 
				
			||||||
apiVersion: v1
 | 
					apiVersion: v1
 | 
				
			||||||
kind: PersistentVolumeClaim
 | 
					kind: PersistentVolumeClaim
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
@@ -83,7 +83,7 @@ spec:
 | 
				
			|||||||
    requests:
 | 
					    requests:
 | 
				
			||||||
      storage: 1Gi
 | 
					      storage: 1Gi
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 4) Ingress (Traefik)
 | 
					# 4) Ingress
 | 
				
			||||||
apiVersion: networking.k8s.io/v1
 | 
					apiVersion: networking.k8s.io/v1
 | 
				
			||||||
kind: Ingress
 | 
					kind: Ingress
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -44,7 +44,7 @@ spec:
 | 
				
			|||||||
    - port: 80
 | 
					    - port: 80
 | 
				
			||||||
      targetPort: 80
 | 
					      targetPort: 80
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 3) PersistentVolumeClaim (local storage via k3s local-path)
 | 
					# 3) PersistentVolumeClaim
 | 
				
			||||||
apiVersion: v1
 | 
					apiVersion: v1
 | 
				
			||||||
kind: PersistentVolumeClaim
 | 
					kind: PersistentVolumeClaim
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
@@ -60,7 +60,7 @@ spec:
 | 
				
			|||||||
    requests:
 | 
					    requests:
 | 
				
			||||||
      storage: 1Gi
 | 
					      storage: 1Gi
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 4) Ingress (Traefik)
 | 
					# 4) Ingress
 | 
				
			||||||
apiVersion: networking.k8s.io/v1
 | 
					apiVersion: networking.k8s.io/v1
 | 
				
			||||||
kind: Ingress
 | 
					kind: Ingress
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -49,7 +49,7 @@ spec:
 | 
				
			|||||||
    - port: 8080
 | 
					    - port: 8080
 | 
				
			||||||
      targetPort: searxng-port
 | 
					      targetPort: searxng-port
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 3) PersistentVolumeClaim (for /config)
 | 
					# 3) PersistentVolumeClaim
 | 
				
			||||||
apiVersion: v1
 | 
					apiVersion: v1
 | 
				
			||||||
kind: PersistentVolumeClaim
 | 
					kind: PersistentVolumeClaim
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
@@ -65,7 +65,7 @@ spec:
 | 
				
			|||||||
    requests:
 | 
					    requests:
 | 
				
			||||||
      storage: 1Gi
 | 
					      storage: 1Gi
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 4) Ingress (Traefik)
 | 
					# 4) Ingress
 | 
				
			||||||
apiVersion: networking.k8s.io/v1
 | 
					apiVersion: networking.k8s.io/v1
 | 
				
			||||||
kind: Ingress
 | 
					kind: Ingress
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -63,7 +63,7 @@ spec:
 | 
				
			|||||||
    - port: 3001
 | 
					    - port: 3001
 | 
				
			||||||
      targetPort: uptimekuma-port
 | 
					      targetPort: uptimekuma-port
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 3) PersistentVolumeClaim (for /config)
 | 
					# 3) PersistentVolumeClaim
 | 
				
			||||||
apiVersion: v1
 | 
					apiVersion: v1
 | 
				
			||||||
kind: PersistentVolumeClaim
 | 
					kind: PersistentVolumeClaim
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
@@ -79,7 +79,7 @@ spec:
 | 
				
			|||||||
    requests:
 | 
					    requests:
 | 
				
			||||||
      storage: 1Gi
 | 
					      storage: 1Gi
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 4) Ingress (Traefik)
 | 
					# 4) Ingress
 | 
				
			||||||
apiVersion: networking.k8s.io/v1
 | 
					apiVersion: networking.k8s.io/v1
 | 
				
			||||||
kind: Ingress
 | 
					kind: Ingress
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -75,7 +75,7 @@ spec:
 | 
				
			|||||||
    requests:
 | 
					    requests:
 | 
				
			||||||
      storage: 1Gi
 | 
					      storage: 1Gi
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 4) Ingress (Traefik)
 | 
					# 4) Ingress
 | 
				
			||||||
apiVersion: networking.k8s.io/v1
 | 
					apiVersion: networking.k8s.io/v1
 | 
				
			||||||
kind: Ingress
 | 
					kind: Ingress
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
@@ -102,7 +102,7 @@ spec:
 | 
				
			|||||||
                port:
 | 
					                port:
 | 
				
			||||||
                  number: 80
 | 
					                  number: 80
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 4) Ingress (Traefik)
 | 
					# 4) Ingress
 | 
				
			||||||
apiVersion: networking.k8s.io/v1
 | 
					apiVersion: networking.k8s.io/v1
 | 
				
			||||||
kind: Ingress
 | 
					kind: Ingress
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -4,18 +4,3 @@ kubectl create secret generic adguardhome-password \
 | 
				
			|||||||
    --from-literal=password='your_adguardhome_password' \ 
 | 
					    --from-literal=password='your_adguardhome_password' \ 
 | 
				
			||||||
    --from-literal=username='your_adguardhome_username' -n dns
 | 
					    --from-literal=username='your_adguardhome_username' -n dns
 | 
				
			||||||
```
 | 
					```
 | 
				
			||||||
 | 
					 | 
				
			||||||
## Add AdGuardHome to CoreDNS configmap fallback:
 | 
					 | 
				
			||||||
1. Edit the CoreDNS configmap:
 | 
					 | 
				
			||||||
```bash
 | 
					 | 
				
			||||||
kubectl edit configmap coredns -n kube-system
 | 
					 | 
				
			||||||
```
 | 
					 | 
				
			||||||
2. Replace the `forward` line with the following:
 | 
					 | 
				
			||||||
```
 | 
					 | 
				
			||||||
    forward . <ADGUARDHOME_IP> <ADGUARDHOME_IP_2>
 | 
					 | 
				
			||||||
```
 | 
					 | 
				
			||||||
This will use AdGuardHome as the primary DNS server and a secondary one as a fallback, instead of using the default Kubernetes CoreDNS server.
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
You may also use `/etc/resolv.conf` to forward to the node's own DNS resolver, but it depends on whether it's well configured or not. *Since it's Linux, we never know.*
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
Ideally, since DNS is required for fetching the container image, you would have AdGuardHome as first and then a public DNS server as second (fallback).
 | 
					 | 
				
			||||||
@@ -53,7 +53,7 @@ spec:
 | 
				
			|||||||
    - port: 80
 | 
					    - port: 80
 | 
				
			||||||
      targetPort: beszel-port
 | 
					      targetPort: beszel-port
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 3) PersistentVolumeClaim (for /config)
 | 
					# 3) PersistentVolumeClaim
 | 
				
			||||||
apiVersion: v1
 | 
					apiVersion: v1
 | 
				
			||||||
kind: PersistentVolumeClaim
 | 
					kind: PersistentVolumeClaim
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
@@ -69,7 +69,7 @@ spec:
 | 
				
			|||||||
    requests:
 | 
					    requests:
 | 
				
			||||||
      storage: 1Gi
 | 
					      storage: 1Gi
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 4) Ingress (Traefik)
 | 
					# 4) Ingress
 | 
				
			||||||
apiVersion: networking.k8s.io/v1
 | 
					apiVersion: networking.k8s.io/v1
 | 
				
			||||||
kind: Ingress
 | 
					kind: Ingress
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -66,7 +66,7 @@ spec:
 | 
				
			|||||||
    - port: 8443
 | 
					    - port: 8443
 | 
				
			||||||
      targetPort: code-port
 | 
					      targetPort: code-port
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 3) PersistentVolumeClaim (for /config)
 | 
					# 3) PersistentVolumeClaim
 | 
				
			||||||
apiVersion: v1
 | 
					apiVersion: v1
 | 
				
			||||||
kind: PersistentVolumeClaim
 | 
					kind: PersistentVolumeClaim
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
@@ -82,7 +82,7 @@ spec:
 | 
				
			|||||||
    requests:
 | 
					    requests:
 | 
				
			||||||
      storage: 5Gi
 | 
					      storage: 5Gi
 | 
				
			||||||
---
 | 
					---
 | 
				
			||||||
# 4) Ingress (Traefik)
 | 
					# 4) Ingress
 | 
				
			||||||
apiVersion: networking.k8s.io/v1
 | 
					apiVersion: networking.k8s.io/v1
 | 
				
			||||||
kind: Ingress
 | 
					kind: Ingress
 | 
				
			||||||
metadata:
 | 
					metadata:
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -22,7 +22,7 @@ spec:
 | 
				
			|||||||
          args:
 | 
					          args:
 | 
				
			||||||
            - "--config.file=/etc/prometheus/prometheus.yml"
 | 
					            - "--config.file=/etc/prometheus/prometheus.yml"
 | 
				
			||||||
            - "--storage.tsdb.path=/prometheus"
 | 
					            - "--storage.tsdb.path=/prometheus"
 | 
				
			||||||
            - "--storage.tsdb.retention.time=3d"
 | 
					            - "--storage.tsdb.retention.time=1d"
 | 
				
			||||||
            - "--web.enable-lifecycle"
 | 
					            - "--web.enable-lifecycle"
 | 
				
			||||||
          ports:
 | 
					          ports:
 | 
				
			||||||
            - containerPort: 9090
 | 
					            - containerPort: 9090
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user