Nik Afiq
83f46c9748
feat(gitea): create PersistentVolume and PersistentVolumeClaim for Gitea feat(gitea): add script to create Gitea runner registration token secret feat(gitea): deploy Gitea Actions runner with Docker socket access feat(media): deploy JDownloader with Ingress configuration feat(media): set up Jellyfin media server with NFS and Ingress feat(media): configure qBittorrent deployment with Ingress feat(monitoring): add Grafana Loki datasource ConfigMap feat(monitoring): create Grafana admin credentials secret feat(monitoring): define PersistentVolumes for monitoring stack feat(network): implement DDNS CronJob for Porkbun DNS updates feat(network): create secret for Porkbun DDNS API credentials feat(network): set up Glances service and Ingress for Debian node fix(network): patch Pi-hole DNS services with external IPs feat(network): configure Traefik dashboard Ingress with Authentik auth feat(network): set up Watch Party service and Ingress for Mac Mini refactor(values): update Helm values files for various services
78 lines
1.8 KiB
YAML
78 lines
1.8 KiB
YAML
# Apply: helm upgrade --install pihole mojo2600/pihole -f values/pihole.yaml -n pihole --create-namespace
|
|
# Description: Helm values for Pi-hole DNS server on Minisforum
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
tag: "2024.07.0"
|
|
|
|
serviceDns:
|
|
type: LoadBalancer
|
|
port: 53
|
|
|
|
serviceWeb:
|
|
type: ClusterIP
|
|
http:
|
|
enabled: true
|
|
port: 80
|
|
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: traefik
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
cert-manager.io/cluster-issuer: internal-ca-issuer
|
|
hosts:
|
|
- pihole.home.arpa
|
|
path: /admin
|
|
tls:
|
|
- secretName: pihole-tls
|
|
hosts:
|
|
- pihole.home.arpa
|
|
|
|
adminPassword: password
|
|
|
|
probes:
|
|
liveness:
|
|
enabled: false
|
|
readiness:
|
|
enabled: false
|
|
|
|
persistentVolumeClaim:
|
|
enabled: true
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
size: 1Gi
|
|
annotations:
|
|
helm.sh/resource-policy: keep
|
|
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: node-role
|
|
operator: In
|
|
values:
|
|
- primary
|
|
|
|
extraEnvVars:
|
|
PIHOLE_DNS_1: "8.8.8.8"
|
|
PIHOLE_DNS_2: "8.8.4.4"
|
|
|
|
dnsmasq:
|
|
customDnsEntries:
|
|
- address=/gitea.home.arpa/192.168.7.77
|
|
- address=/pihole.home.arpa/192.168.7.77
|
|
- address=/home.arpa/192.168.7.77
|
|
- address=/nik4nao.home.arpa/192.168.7.183
|
|
- address=/dashy.home.arpa/192.168.7.77
|
|
- address=/jellyfin.home.arpa/192.168.7.77
|
|
- address=/qbittorrent.home.arpa/192.168.7.77
|
|
- address=/jdownloader.home.arpa/192.168.7.77
|
|
- address=/glances.home.arpa/192.168.7.77
|
|
- address=/glances-debian.home.arpa/192.168.7.77
|
|
- address=/ca.home.arpa/192.168.7.77
|
|
- address=/auth.home.arpa/192.168.7.77
|
|
- address=/traefik.home.arpa/192.168.7.77 |