Install server-xray

installations/applications/helmfile.yaml

@@ -77,7 +77,6 @@ releases:
       - template: default-env-values
       - template: default-env-secrets
       - template: ext-tcp-routes
-  - name: shadowsocks-libev
         #- name: vaultwardentest
         #  chart: allangers-charts/vaultwarden
         #  version: 2.1.0
@@ -85,7 +84,7 @@ releases:
         #  inherit:
         #    - template: default-env-values
         #    - template: default-env-secrets
-
+  - name: shadowsocks-libev
     chart: allangers-charts/shadowsocks-libev
     namespace: applications
     version: 0.3.1
@@ -109,3 +108,11 @@ releases:
     inherit:
       - template: default-env-values
       - template: default-env-secrets
+  - name: server-xray
+    chart: allangers-charts/server-xray
+    namespace: applications
+    version: 0.1.0
+    inherit:
+      - template: default-env-secrets
+      - template: default-env-values
+      - template: ext-tcp-routes

installations/storage/helmfile.yaml

@@ -16,7 +16,7 @@ releases:
       - template: default-env-values
   - name: rook-ceph-cluster
     chart: rook-release/rook-ceph-cluster
-    installed: true
+    installed: false
     namespace: rook-ceph
     version: v1.14.6
     needs:

values/badhouseplants/secrets.server-xray.yaml

@@ -0,0 +1,28 @@
+files:
+  config:
+    enabled: ENC[AES256_GCM,data:irS1Kw==,iv:d6Y1USpST+MWdsYCVHjdhLqESPRinned2iMqeXpsx/U=,tag:ZVJNrrdXRkGZ1sCA48u7Ag==,type:bool]
+    sensitive: ENC[AES256_GCM,data:4RYkFEo=,iv:ItoaiFAlwDmSB/fxFRvW2o2dvmeN9Pgk3YV21+irPuc=,tag:E1fhJpbjKkDnXGTIr0TsTw==,type:bool]
+    remove: []
+    entries:
+      config.json:
+        data: ENC[AES256_GCM,data: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,iv:wKxgEmAOB+UKQ/uwCwzsjGeLLVeOc4KvmzS4+IUAREE=,tag:5krRVzSKhWsBIET60Z1whQ==,type:str]
+sops:
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEZVdLL21JWFJOQkZ2K3hE
+        YkdyWURWSWgvUzliUGtMN1pMMHo4UEVtUTFVCkhrRWpoVWVYNkJTMFZXc2FReTg1
+        YlUzUVlVZnQxK0VsVWZMSDl0ZkVjdFEKLS0tIFdNVHBMcFlnVUl2TXdBbEMrZDZ5
+        NXRsOFRiQmtLYXozS1Z1ZS9tRjA1ZlEKtNWNs12XydjbFUgLywJTbspdqzOu60sB
+        1lwOmKI4PDuB1/6w/VWRz+Pjasq+ktHYnVu2L0EgK8qLuvZPRlBmFw==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-10-06T14:05:28Z"
+  mac: ENC[AES256_GCM,data:pa0rt84/03XkMuaHY5xdAcIN0jgGpPgYBkRrjD5W+VJPZWv39GXIqbTuEX9Eb2ewemgpjLu+rJFbl1cJvGprcGMMWCW/v/MsTDb0fh9kZQGQhM8NOkj7dF62ms2slgpKDd4CmV19K5wpljG0HTB8Ktu2HPwkCEvwqCBGlJ7LS7c=,iv:Bg46R0Vo3ojlV0CKyN7LPWu9uvi61yv/mbP+VWWFhO4=,tag:qy69KtK75S3v6mMYWgWXKQ==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.1

values/badhouseplants/values.server-xray.yaml

@@ -0,0 +1,22 @@
+traefik:
+  enabled: true
+  tcpRoutes:
+    - name: server-xray
+      service: server-xray-xray-https
+      match: HostSNI(`*`)
+      entrypoint: xray
+      port: 443
+shortcuts:
+  hostname: xray.badhouseplants.net
+ingress:
+  main:
+    enabled: true
+    annotations:
+      cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
+      kubernetes.io/ingress.allow-http: "false"
+      kubernetes.io/ingress.class: traefik
+      kubernetes.io/ingress.global-static-ip-name: ""
+      kubernetes.io/tls-acme: "true"
+      meta.helm.sh/release-name: xray
+      meta.helm.sh/release-namespace: xray
+      traefik.ingress.kubernetes.io/router.entrypoints: web,websecure