Nik Afiq
57a78fd8e7
Stage 3 + 6 of REFACTOR_PLAN.md. - Drop nik4nao.home.arpa from both Pi-hole values files: no Certificate, Ingress, or IngressRoute anywhere references it (confirmed via grep). - Add the immich.home.arpa and gluetun.home.arpa entries that existed in values/pihole.yaml but were missing from values/pihole-debian.yaml -- Pi-hole has no wildcard DNS here, so every hostname must be listed in both. Both files' hostname lists now match exactly (aside from the differing target IPs, which is expected for primary vs. secondary). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
84 lines
2.0 KiB
YAML
84 lines
2.0 KiB
YAML
# Apply: helm upgrade --install pihole mojo2600/pihole -f values/pihole.yaml -n pihole --create-namespace
|
|
# Description: Helm values for Pi-hole DNS server on Minisforum
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
tag: "2024.07.0"
|
|
|
|
serviceDns:
|
|
type: LoadBalancer
|
|
port: 53
|
|
|
|
serviceWeb:
|
|
type: ClusterIP
|
|
http:
|
|
enabled: true
|
|
port: 80
|
|
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: traefik
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
cert-manager.io/cluster-issuer: internal-ca-issuer
|
|
hosts:
|
|
- pihole.home.arpa
|
|
path: /admin
|
|
tls:
|
|
- secretName: pihole-tls
|
|
hosts:
|
|
- pihole.home.arpa
|
|
|
|
admin:
|
|
existingSecret: pihole-admin-secret
|
|
passwordKey: password
|
|
|
|
probes:
|
|
liveness:
|
|
enabled: false
|
|
readiness:
|
|
enabled: false
|
|
|
|
persistentVolumeClaim:
|
|
enabled: true
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
size: 1Gi
|
|
annotations:
|
|
helm.sh/resource-policy: keep
|
|
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: node-role
|
|
operator: In
|
|
values:
|
|
- primary
|
|
|
|
extraEnvVars:
|
|
PIHOLE_DNS_1: "8.8.8.8"
|
|
PIHOLE_DNS_2: "8.8.4.4"
|
|
|
|
dnsmasq:
|
|
customDnsEntries:
|
|
- address=/gitea.home.arpa/192.168.7.77
|
|
- address=/pihole.home.arpa/192.168.7.77
|
|
- address=/home.arpa/192.168.7.77
|
|
- address=/dashy.home.arpa/192.168.7.77
|
|
- address=/jellyfin.home.arpa/192.168.7.77
|
|
- address=/qbittorrent.home.arpa/192.168.7.77
|
|
- address=/jdownloader.home.arpa/192.168.7.77
|
|
- address=/glances.home.arpa/192.168.7.77
|
|
- address=/glances-debian.home.arpa/192.168.7.77
|
|
- address=/ca.home.arpa/192.168.7.77
|
|
- address=/auth.home.arpa/192.168.7.77
|
|
- address=/traefik.home.arpa/192.168.7.77
|
|
- address=/immich.home.arpa/192.168.7.77
|
|
- address=/gitea.nik4nao.com/192.168.7.77
|
|
- address=/ha.home.arpa/192.168.7.77
|
|
- address=/argocd.home.arpa/192.168.7.77
|
|
- address=/gluetun.home.arpa/192.168.7.77 |