Nik Afiq
7a8c73d78a
Some checks failed
validate / lint (push) Has been cancelled
minisforum, debian, mac-mini, and gpu-node all moved from 192.168.7.0/24 to 10.10.40.0/24. Updates K3s server/agent config and node IPs (including gpu-node's host_vars override), NFS export allow-list and exports template, Pi-hole DNS records and kube-vip/loadBalancerIP pins, WireGuard's pushed DNS/AllowedIPs, and the NFS server IP baked into Jellyfin/Kavita/gitea-backup PVs and the Ollama URL used by ai-gateway/Dashy. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
87 lines
2.1 KiB
YAML
87 lines
2.1 KiB
YAML
# Apply: helm upgrade --install pihole mojo2600/pihole -f values/pihole.yaml -n pihole --create-namespace
|
|
# Description: Helm values for Pi-hole DNS server on Minisforum
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
tag: "2024.07.0"
|
|
|
|
serviceDns:
|
|
type: LoadBalancer
|
|
port: 53
|
|
|
|
serviceWeb:
|
|
type: ClusterIP
|
|
http:
|
|
enabled: true
|
|
port: 80
|
|
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: traefik
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
cert-manager.io/cluster-issuer: internal-ca-issuer
|
|
hosts:
|
|
- pihole.home.arpa
|
|
path: /admin
|
|
tls:
|
|
- secretName: pihole-tls
|
|
hosts:
|
|
- pihole.home.arpa
|
|
|
|
admin:
|
|
existingSecret: pihole-admin-secret
|
|
passwordKey: password
|
|
|
|
probes:
|
|
liveness:
|
|
enabled: false
|
|
readiness:
|
|
enabled: false
|
|
|
|
persistentVolumeClaim:
|
|
enabled: true
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
size: 1Gi
|
|
annotations:
|
|
helm.sh/resource-policy: keep
|
|
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: node-role
|
|
operator: In
|
|
values:
|
|
- primary
|
|
|
|
extraEnvVars:
|
|
PIHOLE_DNS_1: "8.8.8.8"
|
|
PIHOLE_DNS_2: "8.8.4.4"
|
|
|
|
dnsmasq:
|
|
customDnsEntries:
|
|
- address=/gitea.home.arpa/10.10.40.53
|
|
- address=/pihole.home.arpa/10.10.40.53
|
|
- address=/home.arpa/10.10.40.53
|
|
- address=/nik4nao.home.arpa/10.10.40.20
|
|
- address=/dashy.home.arpa/10.10.40.53
|
|
- address=/jellyfin.home.arpa/10.10.40.53
|
|
- address=/qbittorrent.home.arpa/10.10.40.53
|
|
- address=/jdownloader.home.arpa/10.10.40.53
|
|
- address=/glances.home.arpa/10.10.40.53
|
|
- address=/glances-debian.home.arpa/10.10.40.53
|
|
- address=/ca.home.arpa/10.10.40.53
|
|
- address=/auth.home.arpa/10.10.40.53
|
|
- address=/traefik.home.arpa/10.10.40.53
|
|
- address=/gitea.nik4nao.com/10.10.40.53
|
|
- address=/ha.home.arpa/10.10.40.53
|
|
- address=/argocd.home.arpa/10.10.40.53
|
|
- address=/gluetun.home.arpa/10.10.40.53
|
|
- address=/alert-bridge.home.arpa/10.10.40.53
|
|
- address=/books.home.arpa/10.10.40.53
|
|
- address=/books2.home.arpa/10.10.40.53 |