Trying to add a public xray

2024-10-09 08:33:24 +02:00 · 2024-10-09 08:33:24 +02:00 · e79f38d43f
commit e79f38d43f
parent adb127813f
10 changed files with 2366 additions and 21 deletions
--- a/installations/applications/helmfile.yaml
+++ b/installations/applications/helmfile.yaml
@ -116,3 +116,11 @@ releases:
      - template: default-env-secrets
      - template: default-env-values
      - template: ext-tcp-routes
+  - name: server-xray-public
+    chart: allangers-charts/server-xray
+    namespace: public-xray
+    version: 0.1.0
+    inherit:
+      - template: default-env-secrets
+      - template: default-env-values
+      - template: ext-tcp-routes
--- a/manifests/cilium/cilium-allow-dns.yaml
+++ b/manifests/cilium/cilium-allow-dns.yaml
--- a/manifests/cilium/cilium-allow-google.yaml
+++ b/manifests/cilium/cilium-allow-google.yaml
@ -0,0 +1,492 @@
+apiVersion: "cilium.io/v2"
+kind: CiliumNetworkPolicy
+metadata:
+  name: "cilium-policy-allow-google"
+  namespace: public-xray
+spec:
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/instance: server-xray-public
+      app.kubernetes.io/name: server-xray
+  egress:
+    - toPorts:
+        - ports:
+            - port: "80"
+              protocol: TCP
+            - port: "443"
+              protocol: TCP
+      toCIDR:
+        - 8.8.4.0/24
+        - 8.8.8.0/24
+        - 8.34.208.0/20
+        - 8.35.192.0/20
+        - 23.236.48.0/20
+        - 23.251.128.0/19
+        - 34.0.0.0/15
+        - 34.2.0.0/16
+        - 34.3.0.0/23
+        - 34.3.3.0/24
+        - 34.3.4.0/24
+        - 34.3.8.0/21
+        - 34.3.16.0/20
+        - 34.3.32.0/19
+        - 34.3.64.0/18
+        - 34.4.0.0/14
+        - 34.8.0.0/13
+        - 34.16.0.0/12
+        - 34.32.0.0/11
+        - 34.64.0.0/10
+        - 34.128.0.0/10
+        - 35.184.0.0/13
+        - 35.192.0.0/14
+        - 35.196.0.0/15
+        - 35.198.0.0/16
+        - 35.199.0.0/17
+        - 35.199.128.0/18
+        - 35.200.0.0/13
+        - 35.208.0.0/12
+        - 35.224.0.0/12
+        - 35.240.0.0/13
+        - 57.140.192.0/18
+        - 64.15.112.0/20
+        - 64.233.160.0/19
+        - 66.22.228.0/23
+        - 66.102.0.0/20
+        - 66.249.64.0/19
+        - 70.32.128.0/19
+        - 72.14.192.0/18
+        - 74.125.0.0/16
+        - 104.154.0.0/15
+        - 104.196.0.0/14
+        - 104.237.160.0/19
+        - 107.167.160.0/19
+        - 107.178.192.0/18
+        - 108.59.80.0/20
+        - 108.170.192.0/18
+        - 108.177.0.0/17
+        - 130.211.0.0/16
+        - 136.22.160.0/20
+        - 136.22.176.0/21
+        - 136.22.184.0/23
+        - 136.22.186.0/24
+        - 136.124.0.0/15
+        - 142.250.0.0/15
+        - 146.148.0.0/17
+        - 152.65.208.0/22
+        - 152.65.214.0/23
+        - 152.65.218.0/23
+        - 152.65.222.0/23
+        - 152.65.224.0/19
+        - 162.120.128.0/17
+        - 162.216.148.0/22
+        - 162.222.176.0/21
+        - 172.110.32.0/21
+        - 172.217.0.0/16
+        - 172.253.0.0/16
+        - 173.194.0.0/16
+        - 173.255.112.0/20
+        - 192.158.28.0/22
+        - 192.178.0.0/15
+        - 193.186.4.0/24
+        - 199.36.154.0/23
+        - 199.36.156.0/24
+        - 199.192.112.0/22
+        - 199.223.232.0/21
+        - 207.223.160.0/20
+        - 208.65.152.0/22
+        - 208.68.108.0/22
+        - 208.81.188.0/22
+        - 208.117.224.0/19
+        - 209.85.128.0/17
+        - 216.58.192.0/19
+        - 216.73.80.0/20
+        - 216.239.32.0/19
+        - 2001:4860::/32
+        - 2404:6800::/32
+        - 2404:f340::/32
+        - 2600:1900::/28
+        - 2605:ef80::/32
+        - 2606:40::/32
+        - 2606:73c0::/32
+        - 2607:1c0:300::/40
+        - 2607:f8b0::/32
+        - 2620:11a:a000::/40
+        - 2620:120:e000::/40
+        - 2800:3f0::/32
+        - 2a00:1450::/32
+        - 2c0f:fb50::/32
+      toFQDNs:
+        - matchPattern: "google.com"
+        - matchPattern: "google.ad"
+        - matchPattern: "google.ae"
+        - matchPattern: "google.com.af"
+        - matchPattern: "google.com.ag"
+        - matchPattern: "google.al"
+        - matchPattern: "google.am"
+        - matchPattern: "google.co.ao"
+        - matchPattern: "google.com.ar"
+        - matchPattern: "google.as"
+        - matchPattern: "google.at"
+        - matchPattern: "google.com.au"
+        - matchPattern: "google.az"
+        - matchPattern: "google.ba"
+        - matchPattern: "google.com.bd"
+        - matchPattern: "google.be"
+        - matchPattern: "google.bf"
+        - matchPattern: "google.bg"
+        - matchPattern: "google.com.bh"
+        - matchPattern: "google.bi"
+        - matchPattern: "google.bj"
+        - matchPattern: "google.com.bn"
+        - matchPattern: "google.com.bo"
+        - matchPattern: "google.com.br"
+        - matchPattern: "google.bs"
+        - matchPattern: "google.bt"
+        - matchPattern: "google.co.bw"
+        - matchPattern: "google.by"
+        - matchPattern: "google.com.bz"
+        - matchPattern: "google.ca"
+        - matchPattern: "google.cd"
+        - matchPattern: "google.cf"
+        - matchPattern: "google.cg"
+        - matchPattern: "google.ch"
+        - matchPattern: "google.ci"
+        - matchPattern: "google.co.ck"
+        - matchPattern: "google.cl"
+        - matchPattern: "google.cm"
+        - matchPattern: "google.cn"
+        - matchPattern: "google.com.co"
+        - matchPattern: "google.co.cr"
+        - matchPattern: "google.com.cu"
+        - matchPattern: "google.cv"
+        - matchPattern: "google.com.cy"
+        - matchPattern: "google.cz"
+        - matchPattern: "google.de"
+        - matchPattern: "google.dj"
+        - matchPattern: "google.dk"
+        - matchPattern: "google.dm"
+        - matchPattern: "google.com.do"
+        - matchPattern: "google.dz"
+        - matchPattern: "google.com.ec"
+        - matchPattern: "google.ee"
+        - matchPattern: "google.com.eg"
+        - matchPattern: "google.es"
+        - matchPattern: "google.com.et"
+        - matchPattern: "google.fi"
+        - matchPattern: "google.com.fj"
+        - matchPattern: "google.fm"
+        - matchPattern: "google.fr"
+        - matchPattern: "google.ga"
+        - matchPattern: "google.ge"
+        - matchPattern: "google.gg"
+        - matchPattern: "google.com.gh"
+        - matchPattern: "google.com.gi"
+        - matchPattern: "google.gl"
+        - matchPattern: "google.gm"
+        - matchPattern: "google.gr"
+        - matchPattern: "google.com.gt"
+        - matchPattern: "google.gy"
+        - matchPattern: "google.com.hk"
+        - matchPattern: "google.hn"
+        - matchPattern: "google.hr"
+        - matchPattern: "google.ht"
+        - matchPattern: "google.hu"
+        - matchPattern: "google.co.id"
+        - matchPattern: "google.ie"
+        - matchPattern: "google.co.il"
+        - matchPattern: "google.im"
+        - matchPattern: "google.co.in"
+        - matchPattern: "google.iq"
+        - matchPattern: "google.is"
+        - matchPattern: "google.it"
+        - matchPattern: "google.je"
+        - matchPattern: "google.com.jm"
+        - matchPattern: "google.jo"
+        - matchPattern: "google.co.jp"
+        - matchPattern: "google.co.ke"
+        - matchPattern: "google.com.kh"
+        - matchPattern: "google.ki"
+        - matchPattern: "google.kg"
+        - matchPattern: "google.co.kr"
+        - matchPattern: "google.com.kw"
+        - matchPattern: "google.kz"
+        - matchPattern: "google.la"
+        - matchPattern: "google.com.lb"
+        - matchPattern: "google.li"
+        - matchPattern: "google.lk"
+        - matchPattern: "google.co.ls"
+        - matchPattern: "google.lt"
+        - matchPattern: "google.lu"
+        - matchPattern: "google.lv"
+        - matchPattern: "google.com.ly"
+        - matchPattern: "google.co.ma"
+        - matchPattern: "google.md"
+        - matchPattern: "google.me"
+        - matchPattern: "google.mg"
+        - matchPattern: "google.mk"
+        - matchPattern: "google.ml"
+        - matchPattern: "google.com.mm"
+        - matchPattern: "google.mn"
+        - matchPattern: "google.com.mt"
+        - matchPattern: "google.mu"
+        - matchPattern: "google.mv"
+        - matchPattern: "google.mw"
+        - matchPattern: "google.com.mx"
+        - matchPattern: "google.com.my"
+        - matchPattern: "google.co.mz"
+        - matchPattern: "google.com.na"
+        - matchPattern: "google.com.ng"
+        - matchPattern: "google.com.ni"
+        - matchPattern: "google.ne"
+        - matchPattern: "google.nl"
+        - matchPattern: "google.no"
+        - matchPattern: "google.com.np"
+        - matchPattern: "google.nr"
+        - matchPattern: "google.nu"
+        - matchPattern: "google.co.nz"
+        - matchPattern: "google.com.om"
+        - matchPattern: "google.com.pa"
+        - matchPattern: "google.com.pe"
+        - matchPattern: "google.com.pg"
+        - matchPattern: "google.com.ph"
+        - matchPattern: "google.com.pk"
+        - matchPattern: "google.pl"
+        - matchPattern: "google.pn"
+        - matchPattern: "google.com.pr"
+        - matchPattern: "google.ps"
+        - matchPattern: "google.pt"
+        - matchPattern: "google.com.py"
+        - matchPattern: "google.com.qa"
+        - matchPattern: "google.ro"
+        - matchPattern: "google.ru"
+        - matchPattern: "google.rw"
+        - matchPattern: "google.com.sa"
+        - matchPattern: "google.com.sb"
+        - matchPattern: "google.sc"
+        - matchPattern: "google.se"
+        - matchPattern: "google.com.sg"
+        - matchPattern: "google.sh"
+        - matchPattern: "google.si"
+        - matchPattern: "google.sk"
+        - matchPattern: "google.com.sl"
+        - matchPattern: "google.sn"
+        - matchPattern: "google.so"
+        - matchPattern: "google.sm"
+        - matchPattern: "google.sr"
+        - matchPattern: "google.st"
+        - matchPattern: "google.com.sv"
+        - matchPattern: "google.td"
+        - matchPattern: "google.tg"
+        - matchPattern: "google.co.th"
+        - matchPattern: "google.com.tj"
+        - matchPattern: "google.tl"
+        - matchPattern: "google.tm"
+        - matchPattern: "google.tn"
+        - matchPattern: "google.to"
+        - matchPattern: "google.com.tr"
+        - matchPattern: "google.tt"
+        - matchPattern: "google.com.tw"
+        - matchPattern: "google.co.tz"
+        - matchPattern: "google.com.ua"
+        - matchPattern: "google.co.ug"
+        - matchPattern: "google.co.uk"
+        - matchPattern: "google.com.uy"
+        - matchPattern: "google.co.uz"
+        - matchPattern: "google.com.vc"
+        - matchPattern: "google.co.ve"
+        - matchPattern: "google.co.vi"
+        - matchPattern: "google.com.vn"
+        - matchPattern: "google.vu"
+        - matchPattern: "google.ws"
+        - matchPattern: "google.rs"
+        - matchPattern: "google.co.za"
+        - matchPattern: "google.co.zm"
+        - matchPattern: "google.co.zw"
+        - matchPattern: "google.cat"
+        - matchPattern: "*.google.com"
+        - matchPattern: "*.google.ad"
+        - matchPattern: "*.google.ae"
+        - matchPattern: "*.google.com.af"
+        - matchPattern: "*.google.com.ag"
+        - matchPattern: "*.google.al"
+        - matchPattern: "*.google.am"
+        - matchPattern: "*.google.co.ao"
+        - matchPattern: "*.google.com.ar"
+        - matchPattern: "*.google.as"
+        - matchPattern: "*.google.at"
+        - matchPattern: "*.google.com.au"
+        - matchPattern: "*.google.az"
+        - matchPattern: "*.google.ba"
+        - matchPattern: "*.google.com.bd"
+        - matchPattern: "*.google.be"
+        - matchPattern: "*.google.bf"
+        - matchPattern: "*.google.bg"
+        - matchPattern: "*.google.com.bh"
+        - matchPattern: "*.google.bi"
+        - matchPattern: "*.google.bj"
+        - matchPattern: "*.google.com.bn"
+        - matchPattern: "*.google.com.bo"
+        - matchPattern: "*.google.com.br"
+        - matchPattern: "*.google.bs"
+        - matchPattern: "*.google.bt"
+        - matchPattern: "*.google.co.bw"
+        - matchPattern: "*.google.by"
+        - matchPattern: "*.google.com.bz"
+        - matchPattern: "*.google.ca"
+        - matchPattern: "*.google.cd"
+        - matchPattern: "*.google.cf"
+        - matchPattern: "*.google.cg"
+        - matchPattern: "*.google.ch"
+        - matchPattern: "*.google.ci"
+        - matchPattern: "*.google.co.ck"
+        - matchPattern: "*.google.cl"
+        - matchPattern: "*.google.cm"
+        - matchPattern: "*.google.cn"
+        - matchPattern: "*.google.com.co"
+        - matchPattern: "*.google.co.cr"
+        - matchPattern: "*.google.com.cu"
+        - matchPattern: "*.google.cv"
+        - matchPattern: "*.google.com.cy"
+        - matchPattern: "*.google.cz"
+        - matchPattern: "*.google.de"
+        - matchPattern: "*.google.dj"
+        - matchPattern: "*.google.dk"
+        - matchPattern: "*.google.dm"
+        - matchPattern: "*.google.com.do"
+        - matchPattern: "*.google.dz"
+        - matchPattern: "*.google.com.ec"
+        - matchPattern: "*.google.ee"
+        - matchPattern: "*.google.com.eg"
+        - matchPattern: "*.google.es"
+        - matchPattern: "*.google.com.et"
+        - matchPattern: "*.google.fi"
+        - matchPattern: "*.google.com.fj"
+        - matchPattern: "*.google.fm"
+        - matchPattern: "*.google.fr"
+        - matchPattern: "*.google.ga"
+        - matchPattern: "*.google.ge"
+        - matchPattern: "*.google.gg"
+        - matchPattern: "*.google.com.gh"
+        - matchPattern: "*.google.com.gi"
+        - matchPattern: "*.google.gl"
+        - matchPattern: "*.google.gm"
+        - matchPattern: "*.google.gr"
+        - matchPattern: "*.google.com.gt"
+        - matchPattern: "*.google.gy"
+        - matchPattern: "*.google.com.hk"
+        - matchPattern: "*.google.hn"
+        - matchPattern: "*.google.hr"
+        - matchPattern: "*.google.ht"
+        - matchPattern: "*.google.hu"
+        - matchPattern: "*.google.co.id"
+        - matchPattern: "*.google.ie"
+        - matchPattern: "*.google.co.il"
+        - matchPattern: "*.google.im"
+        - matchPattern: "*.google.co.in"
+        - matchPattern: "*.google.iq"
+        - matchPattern: "*.google.is"
+        - matchPattern: "*.google.it"
+        - matchPattern: "*.google.je"
+        - matchPattern: "*.google.com.jm"
+        - matchPattern: "*.google.jo"
+        - matchPattern: "*.google.co.jp"
+        - matchPattern: "*.google.co.ke"
+        - matchPattern: "*.google.com.kh"
+        - matchPattern: "*.google.ki"
+        - matchPattern: "*.google.kg"
+        - matchPattern: "*.google.co.kr"
+        - matchPattern: "*.google.com.kw"
+        - matchPattern: "*.google.kz"
+        - matchPattern: "*.google.la"
+        - matchPattern: "*.google.com.lb"
+        - matchPattern: "*.google.li"
+        - matchPattern: "*.google.lk"
+        - matchPattern: "*.google.co.ls"
+        - matchPattern: "*.google.lt"
+        - matchPattern: "*.google.lu"
+        - matchPattern: "*.google.lv"
+        - matchPattern: "*.google.com.ly"
+        - matchPattern: "*.google.co.ma"
+        - matchPattern: "*.google.md"
+        - matchPattern: "*.google.me"
+        - matchPattern: "*.google.mg"
+        - matchPattern: "*.google.mk"
+        - matchPattern: "*.google.ml"
+        - matchPattern: "*.google.com.mm"
+        - matchPattern: "*.google.mn"
+        - matchPattern: "*.google.com.mt"
+        - matchPattern: "*.google.mu"
+        - matchPattern: "*.google.mv"
+        - matchPattern: "*.google.mw"
+        - matchPattern: "*.google.com.mx"
+        - matchPattern: "*.google.com.my"
+        - matchPattern: "*.google.co.mz"
+        - matchPattern: "*.google.com.na"
+        - matchPattern: "*.google.com.ng"
+        - matchPattern: "*.google.com.ni"
+        - matchPattern: "*.google.ne"
+        - matchPattern: "*.google.nl"
+        - matchPattern: "*.google.no"
+        - matchPattern: "*.google.com.np"
+        - matchPattern: "*.google.nr"
+        - matchPattern: "*.google.nu"
+        - matchPattern: "*.google.co.nz"
+        - matchPattern: "*.google.com.om"
+        - matchPattern: "*.google.com.pa"
+        - matchPattern: "*.google.com.pe"
+        - matchPattern: "*.google.com.pg"
+        - matchPattern: "*.google.com.ph"
+        - matchPattern: "*.google.com.pk"
+        - matchPattern: "*.google.pl"
+        - matchPattern: "*.google.pn"
+        - matchPattern: "*.google.com.pr"
+        - matchPattern: "*.google.ps"
+        - matchPattern: "*.google.pt"
+        - matchPattern: "*.google.com.py"
+        - matchPattern: "*.google.com.qa"
+        - matchPattern: "*.google.ro"
+        - matchPattern: "*.google.ru"
+        - matchPattern: "*.google.rw"
+        - matchPattern: "*.google.com.sa"
+        - matchPattern: "*.google.com.sb"
+        - matchPattern: "*.google.sc"
+        - matchPattern: "*.google.se"
+        - matchPattern: "*.google.com.sg"
+        - matchPattern: "*.google.sh"
+        - matchPattern: "*.google.si"
+        - matchPattern: "*.google.sk"
+        - matchPattern: "*.google.com.sl"
+        - matchPattern: "*.google.sn"
+        - matchPattern: "*.google.so"
+        - matchPattern: "*.google.sm"
+        - matchPattern: "*.google.sr"
+        - matchPattern: "*.google.st"
+        - matchPattern: "*.google.com.sv"
+        - matchPattern: "*.google.td"
+        - matchPattern: "*.google.tg"
+        - matchPattern: "*.google.co.th"
+        - matchPattern: "*.google.com.tj"
+        - matchPattern: "*.google.tl"
+        - matchPattern: "*.google.tm"
+        - matchPattern: "*.google.tn"
+        - matchPattern: "*.google.to"
+        - matchPattern: "*.google.com.tr"
+        - matchPattern: "*.google.tt"
+        - matchPattern: "*.google.com.tw"
+        - matchPattern: "*.google.co.tz"
+        - matchPattern: "*.google.com.ua"
+        - matchPattern: "*.google.co.ug"
+        - matchPattern: "*.google.co.uk"
+        - matchPattern: "*.google.com.uy"
+        - matchPattern: "*.google.co.uz"
+        - matchPattern: "*.google.com.vc"
+        - matchPattern: "*.google.co.ve"
+        - matchPattern: "*.google.co.vi"
+        - matchPattern: "*.google.com.vn"
+        - matchPattern: "*.google.vu"
+        - matchPattern: "*.google.ws"
+        - matchPattern: "*.google.rs"
+        - matchPattern: "*.google.co.za"
+        - matchPattern: "*.google.co.zm"
+        - matchPattern: "*.google.co.zw"
+        - matchPattern: "*.google.cat"
--- a/manifests/debug.yaml
+++ b/manifests/debug.yaml
@ -0,0 +1,19 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  labels:
+    app.kubernetes.io/instance: server-xray-public
+    app.kubernetes.io/name: server-xray
+  name: debug
+  namespace: public-xray
+spec:
+  containers:
+    - args:
+        - -c
+        - sleep 1000
+      command:
+        - sh
+      image: ubuntu:latest
+      imagePullPolicy: Always
+      name: server-xray
+  dnsPolicy: ClusterFirst
--- a/values/badhouseplants/secrets.server-xray-public.yaml
+++ b/values/badhouseplants/secrets.server-xray-public.yaml
@ -0,0 +1,28 @@
+files:
+  config:
+    enabled: ENC[AES256_GCM,data:IeE1oA==,iv:tDAmGSUCTvP2Ey1BBvpWvhqUN9Y5CpkT/2aU0LM8XPk=,tag:3PNVGpWh2/dJW2+X3/iSaw==,type:bool]
+    sensitive: ENC[AES256_GCM,data:/CF2INw=,iv:TUBu92fuG+M1SCCEOhPC2s5LFMCIedUMEca2dZK41P4=,tag:wCVVKJAPpFl507jlj3oKgQ==,type:bool]
+    remove: []
+    entries:
+      config.json:
+        data: ENC[AES256_GCM,data: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,iv:LQwajPlEu5Jizce4veKcKJs8LlUXZ7ai26IDvsjJ8dg=,tag:+ojhEALok4xtQCMIaWWYoQ==,type:str]
+sops:
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSZDZMZFRaRVB2RnZsL0Jn
+        Tjk0T0pIWm83aVdNeWduK1R0U2x6bWJZWnlzClFoQmRRcUxHY1ovUi9MZzluRjYv
+        aU9HUmIyOVh5RlB5RXY2RjRQdzdVRGcKLS0tIEsrV25PTk1sZ3NocHRxZDhZVVhq
+        dW9kVk9UbjJaS0pkNVN6ZkhDcXFqTDgKfQdGqWopgZ8zvGL7FS05YIEr+LoLy3DT
+        4c+KmuONPuieQ7Txns/EiVlQNxKJkIo5TnkMMLeDYA0jJCx40hKYmQ==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-10-08T23:23:06Z"
+  mac: ENC[AES256_GCM,data:1QUkLQv5tdIM+pU6JGqSWzq7ujKrwpKN/vGXL51h27REs2mf/Xmo0rNFETxlTswoFqVrZxbzJqbACWaGMzhi9P90RAlgnK35YjHJu+Nis63mC/1bSeqBuo0h18IsQrFHqbN+ZNu30FvEUmvDJu9xgTvmHHcZkqwfeappo8Rrj4U=,iv:B6NTOFrh0aKmZbHw88zqj1WgsxIR9mQkWrLAASbMy54=,tag:JCJmvmNB0CsmTYQmObGCxw==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.1
--- a/values/badhouseplants/secrets.server-xray.yaml
+++ b/values/badhouseplants/secrets.server-xray.yaml
@ -1,11 +1,11 @@
 files:
  config:
-    enabled: ENC[AES256_GCM,data:irS1Kw==,iv:d6Y1USpST+MWdsYCVHjdhLqESPRinned2iMqeXpsx/U=,tag:ZVJNrrdXRkGZ1sCA48u7Ag==,type:bool]
-    sensitive: ENC[AES256_GCM,data:4RYkFEo=,iv:ItoaiFAlwDmSB/fxFRvW2o2dvmeN9Pgk3YV21+irPuc=,tag:E1fhJpbjKkDnXGTIr0TsTw==,type:bool]
+    enabled: ENC[AES256_GCM,data:9UYdAQ==,iv:MtzOcl0tGhyhgAQX789Zpn0ycW39V2RYrUwtATSqgrw=,tag:ShoQhivhkJ5xA8hSJqErhw==,type:bool]
+    sensitive: ENC[AES256_GCM,data:w3moC0M=,iv:D9Kx20xeANYr66tqtBC3rg2qtfheUAColhamByHGoIk=,tag:VQrlkkV0Pv8vidqmhToxMg==,type:bool]
    remove: []
    entries:
      config.json:
-        data: ENC[AES256_GCM,data:Kq/cYOELVPoK3aZwUHpRK/gO4O+fP0t1MCkFJyXMy5N0mnLPZetVKeB8fnaQipFOOJDtdbkU4+HICCgdQybg6Exh+ifyxlLgHHGv38+jHjmoDjB4aqAc8Zjojkvyg87rbavNKEOIFPDGU57JmKlFdXlIJx/1X9MN11/t9VlxhdmwjMkeB4AZhJncH2v34LwLDmRNGAf0fwjUjbNxfB5d4NCSPFh27I0i5OFFPxxQzuYAbpVGhDZ8ebYTxl0bwZuKP1LsSrqz4PltvwP5Ng7t2DtPsuPIZ5FxvIZZd9EW7MPBkPG4PWOeAZblzd5g/l815G9J/yvQqDgPzd6fz6BOvU4ioN9zlwEVwnqqD3EMegyqfETrrjQ6KCqKQNCyhIrCQ+oA0pRpJBi4dJ8Tq9TijTEWy+h9Yms+tAggqUNURpzmfPXvFqs8yM8Lcr1H+fbKYuFT31obsiSre9SzwReX26GQIM2HWvUr8tcZyqaH8U5EjzwpgYOMmUWgxEDRHpU2rSN1LtpN0k3Y1/k9Z5nLzr3A+p7b7x/YngTTK4eSAxJyqTN9QrrgE+8NeSJaFx9GoqZEawPZd87d1fwG7KvtefF2H6/xZMYN7Mb7Yhy10uIW3CVYQIPjWG8ZjyJURsNJem2TO+XaeVgn/lcSyf8sYZbJ53bh1Rgpd0DAljHlGdBrfjRCrsWqTW29ZFFRme3FK3k5RJRmpYGWXtz9uhdL1pmQqnkswBFd0oiZpxgM3CU9+N3rqAWTt1bWsr8UJKRQcjTqnRVt+xob+oDqYxbZCUIkrCJh9GwMutSZUBCDYXrOOBbLLk4yWWXhfe4o5UowL52t/2zi4SWjDX4I1X8rlv8Gjx3aeUTQjews2Ka47Y1S8HoUBZIj0lno6lbwALCvk86v8ESOkdzHKrxFIM+GJXmhcxY96YfEIT5yB+/e3sQuypAsbxpoq8WdWQN+kjJQREtJI+EQgod7Bcxh1rAFMpkJATEixtq4PYHdf4jOd2uGpAQUdhxp8s+POHbrqxD299iI+ZFGsrEbsW3HrX0GhcifDRrtGdUNBfu4kwwgoS8K9W0z2RVXridt+oBO8Y1vcF+YZsaC6gjKqbgmlR+h06L7XW4LecleKl7jCv1GPhGDGNIHlFpsfUkjU2TgemYmcG8Js0/xt46Ugj1SxR82YPFdsZdjzi0QSElmZvBKf/jTUD9p1znOC47+8ALS38XhJeg6Cy8uQRVV8V+tgrJKn/sKHd+JaDjHjWyL1osKa9inLaQ3fpmSpmWBWqkt5ys+9iP2Yajv3XtoM5vc27DD3s1K4Fox8zKCRQFwMBus/F7+spcd2HMo/VUSwciPSnTtGUCgJLjyJPHFfVLEhX/7oLb88uISvxWa9fL5JOWEuW8gCShSPFyL6fBR+LIkVjNGAhxnOWg3rcPg39dScQ80ZKGoPdFopnHNjBZ9GeZ+bGwJhc7IrArCyHnNImJZ8wAjqG0k+6MthSnmBTrM3DYFu4lLUe1sgCGN5WDZ72LsmCnq8rt9VWR8788wSUGsIyifdcIlpD/Z1PzSXpdmep+LoVsUGExwCQNMYQ27jerd6iH9IjVQUykoTYzyuxUhkioRfxB83IuVcJjWoupj5NICFAAUIYpktZbQkT0wS5I//GZYCtr3CXLP0f4U4Usei9RHVip5c3YJ77eBK9ThXkJ4ay0dNg0zE0gNfygjpijuesR9++gySRyq66Y8KXXg6C8e8xRS66Rqsbe/wpETbU35bAAUawycr0FIJeAZOYXEP5JttZxN7y71Gt4YIniGVS4uM1KsaNi4SwZnYctbG+5a+HMbPcaZfetdrthK6RWxrCBjy52joB/fpZkgkQxv9CRyaNZMxb9fIIRqaLPLnuGPAQtcSBqGxScUVWBCEIac4lz/yG8RgKvRbeEIBBaRkUsoJ/eMw08YU4sb3wT+mB9WgtPFVyk60LS8luiWzIupRImuQbnbItMOpU40Qw4XuoEJe+kg3FAssIJdhlSRLZ7ULItTYMCzvsdpWyF96SFS05cBR+w0ZHJ+ftbrjuGutcWyVQiyGv6bwyEj8ODeyVL3BRvPAorn1uicVEpzAUTxrn/CBRn1yMzQU8pZPq9V4FY+PFoEznRLmEzMkTmNg7mClkOiZcl4ErCFZYa/zh5J7aLJ2CiLqwY0qMHSypX0LPfUTuJnBGkKiGSgdHjTwImEZv78hzRMAcfiWPedRxStjUbGzm6/vnvt1fvs16E2gDXLgcfEKFfquNNjNx/czb/McUOl/dqTMLqdX91FKqwXrqXWrnep/puYcqmxHXnj/JQtCEuBEtV/Sk87kS3M4hSONAGsbwrs+PTneUCtefFBLSODZevpHzlz3U3kkLPhqfuIEQHV9CBSSA6J/KzTzEbaH669tEmmZLtzROPulMA7AW6CLTuBNuRQIwcje/N1DDxOd2yBSv9JuaxrGykJmsJrAy0kpu0RE7CrSN4+228DToh+pjezt7Gmr0NbOGTLcqoZPAo/uRf7Zkxq+c/UkyQN3k/C8IXx0jvpL0OvrMIYaU402a998v2Wy9sKtr9J41K/dEw3E9j/xr4G+vKbewnYc6UpUGm1LK9usQj2TyJ4nwx/XwecYjuBFC4VJGnUaFoyBj2gTE3O4Lt38mL8Sp+gjlZReNiyU9IKkqViKIgvqzZ5TqHIxSJnuweC3Zvgp4cThRYjlN0BxghVxAcj1q3TZYW0zq81ep0vhPyk4Rklk+Qn8TISgDx9UjnibKvtN04r2fUUI5sZeBfrMmZDqPY7aZxuViHqy5wpaK+DPkmWXM3sy3oq04f43drBOsBrvn7EA0f3wS6XJamCoPIbTxxabV9D5fR51W9mvjh8b2AswiF8Ug7XwoQNTIW5rtlxcikqmX0J/LFN+Wx93DESIx+PFV+SdbWfTjMRJY0ZGvUw8iad0GZ0dO+EJBFKfQ3NmeBnS9v8bOHJzQUEfrW0Fr2LAhA9E5FCGcscde/97bbnrFfy/llKAdPXQCIgU7nsnqqqbIAdAZBOlNWiBWNgbaYQqV3udvTBUXi/AZyv8jr7CrPiC3PTDQ1ZrxKLSJH2pSOj1ZgQF1g207rmrHvKSLFHkdP1MpfMlVoUsv32+GgMwbm7hCL2hyjifXPzKug/6DUgpxCwSd/qNc9xC5BNXV9wNOs7FRYhLpg/veERc7qrIBhpumYx7Wx8j33q3+kPEKKuc6lNyo6j2gSJNlmFxBThg/9hp/lWCnBAJ4cnESLUkH2dqaFkOgoE3CPfA11YTLVloZVpr+f9MIkGoT0x+7eyvJFIhf5+WZYGrS4ivf3UO4z/ZSEVrsGd77JoH4wVd32e+zYWpKccYYEHMBwFtQp8XG0Cl6WvK4bm+EILYIxa1BOB5l/WsbPBZ/0ymM0EbzeQH3F7NjYfhized0bTE6vhNZsyJn0XlTmrC5FoBd9UR4+jrOconkc/15y8e5sOtD1UNPGy0v52w5wiCpg/iEfYTtDFs7qHXi/OVbh0Io+tO3JaGvERv8iuMsoZ29OewblfqK3xXUWiwHNM+eLuTNy4ovNtgKq+G5iFqnelVyccbGIz9OUA6Q0vqNFGeCcVdtzqV2FEy1qndB4//D/B84niqSxjWIY1O5mvOmW4afy0uBf1RJDkCGWJAWj3NqGQxmt9h+cc+tVdc82JJiayWm50h8dUMBTmZmt9mvdoDIuaAl/tf04vXmiK2DwsrDV1xuOvrKhf2UkPx5OiQ36wKdb1rL91XkCFb/Tk8ja2PocAbdwXMvV3dvlX8LZWTpZYfkWGhpjihLAPluqcDMgt01KKw9DS+iunkt6elgg=,iv:wKxgEmAOB+UKQ/uwCwzsjGeLLVeOc4KvmzS4+IUAREE=,tag:5krRVzSKhWsBIET60Z1whQ==,type:str]
+        data: ENC[AES256_GCM,data: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,iv:WOex/9wDsaASnouJ1u7wXK7nMTnPP0Gofv+K2KSlCU0=,tag:It4orTwQcxhlhPnshP8Ptg==,type:str]
 sops:
  kms: []
  gcp_kms: []
@ -15,14 +15,14 @@ sops:
    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
      enc: |
        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEZVdLL21JWFJOQkZ2K3hE
-        YkdyWURWSWgvUzliUGtMN1pMMHo4UEVtUTFVCkhrRWpoVWVYNkJTMFZXc2FReTg1
-        YlUzUVlVZnQxK0VsVWZMSDl0ZkVjdFEKLS0tIFdNVHBMcFlnVUl2TXdBbEMrZDZ5
-        NXRsOFRiQmtLYXozS1Z1ZS9tRjA1ZlEKtNWNs12XydjbFUgLywJTbspdqzOu60sB
-        1lwOmKI4PDuB1/6w/VWRz+Pjasq+ktHYnVu2L0EgK8qLuvZPRlBmFw==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYaHFSVUJoNG1UT1N3VElx
+        bUhOZnlZalF0c0FrVlFEdUpNU2Zsa0RSOFJJCmFtWXRyMkZIMU54QW9sV09vZ2Rx
+        TDR1M3Fmb1JXL1pBN0dWNkQ5d0FnUnMKLS0tIFhqeU1LV2U1R2d2eEQrNDZYa3hE
+        VzhNMmlvR3Bob0dCK1BhRklESnBlTk0Kac3TXF5jm8UmCAtcZE3l/t5WMswISfCp
+        3i0cyfxf8V5L5/vnv5TPCs8JROo3hL6elVA+tl7rYH29AnI+B2ZA/Q==
        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-06T14:05:28Z"
-  mac: ENC[AES256_GCM,data:pa0rt84/03XkMuaHY5xdAcIN0jgGpPgYBkRrjD5W+VJPZWv39GXIqbTuEX9Eb2ewemgpjLu+rJFbl1cJvGprcGMMWCW/v/MsTDb0fh9kZQGQhM8NOkj7dF62ms2slgpKDd4CmV19K5wpljG0HTB8Ktu2HPwkCEvwqCBGlJ7LS7c=,iv:Bg46R0Vo3ojlV0CKyN7LPWu9uvi61yv/mbP+VWWFhO4=,tag:qy69KtK75S3v6mMYWgWXKQ==,type:str]
+  lastmodified: "2024-10-08T22:55:16Z"
+  mac: ENC[AES256_GCM,data:CFONXeSm7/3Obh7pMagJmbYjAbPBx814pDO09ZZ1btORmEnl90wqu6sfVwjaRgzTASNRgVMOdJIJ0xoJztUXFwVTaJi1SRV6FMd+oVTST7yqAuOLxsQ6BnOWHlDmhd2u6/JDLh/ir0Pnx/hQe0q6aRWzW56Q4K51ZCMzM6irHgk=,iv:pHENtD9hx2MyMGKC/KYhQ7TQ/OX6dzRXMeL4dyiUHzw=,tag:8wcGiJDujxZ0pvnf1PLbJg==,type:str]
  pgp: []
  unencrypted_suffix: _unencrypted
  version: 3.9.1
--- a/values/badhouseplants/secrets.zot.yaml
+++ b/values/badhouseplants/secrets.zot.yaml
@ -1,8 +1,8 @@
 configFiles:
-  config.json: ENC[AES256_GCM,data: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,iv:NauXTxq/epGSLUXJYU0qAdPXXZb0nVdPz9wYuw4z7KQ=,tag:T1Ukzwr9HXr2nDkCI3asVg==,type:str]
+  config.json: ENC[AES256_GCM,data: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,iv:GzIhDRZ8w1mcF6lmvWBd3s8vWakJTsXOLKZyc0t1qM8=,tag:ibOApcXGhVQtHs60yL6vXA==,type:str]
 secretFiles:
-  htpasswd: ENC[AES256_GCM,data:7hx0UHY4kREt/Dp3dQNnv/HG8iVbRR7Tpmd6Pj9MP8x5AymzNI774HwINl/kkZc0OGocQRjOQcj9YbKe54hOdSWb2wC033nRfNQlevY4YpXv0GmxkhRthiU+2Wn02/HiI2dLkTnk0nP1UvDPIRPcUXdoSwFhvrFIFzZvADaMfr5IEWSXpJ+gvA==,iv:k/5BYiYoaeyNHGRIvJlPMeSk5E3ctALLM1/xPju3Neg=,tag:U1l19L6yxqtbZFPSmnw3og==,type:str]
-authHeader: ENC[AES256_GCM,data:aHXiU8LOkdF14rIjNksKhcvbyEb4mASYQM+5Wmlj+/IJJKvxSUaARzEs7H+WYD/r,iv:zcRYwwbn/BJIh9KgAtC6UR+i6HaSjr8t2EPT0fPB8Lg=,tag:P0lU6Qbyghgs6jgHQh9W9g==,type:str]
+  htpasswd: ENC[AES256_GCM,data:MpLy/v1WNM26m2fIA3UGCWygS9Z80P1P7DayXVPOX3LBXBsOemasaBX9UKxyY+AmIv4i1t8ytP1b/8sC7ySxkm/WRVo9YUSAZM6+yyI0SITv1opSFlsgtXoVevsOFJFcBvl4BQyDeCanqEvV94fErFmRMLO/an9Cd2WcU7CFbufjx6/sTJ1Vkg==,iv:gKgR+o/oljsVJh5m5NwjXtA76BqkYV7kMPnuevFUx8w=,tag:S8pD6rcg10SE0DJaQPgm2g==,type:str]
+authHeader: ENC[AES256_GCM,data:M9vETrcSu0qJBRC2iydrZFDCLiUYpWrmLcH9U0kGzJ+k578iwqds6Sc9K6ZM93eR,iv:IMpRpA9esXD1hVQDM3H8XS3A0bQCqqkgo0nj75g3+Rg=,tag:1OQxun7VcUEtylIjDt9WFQ==,type:str]
 sops:
  kms: []
  gcp_kms: []
@ -12,14 +12,14 @@ sops:
    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
      enc: |
        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBscHVTS2JDVmdCT2ZBN1dU
-        ZHBxY2xKRlBJcU9sSXN5blA4QzdNLzhQdFJrCmxtOFZFa0I4YitMTStpb25WWmJY
-        TjRENkIwNS9NL3AydlFIbkYyNU9qMGcKLS0tIDIvN0M0aWJVS1pzVVVySHNnZ1BW
-        TmpNWmp4MFNyeXd2WjdxSVMxZU9YMUUKbYpb2SG/2JI8vZgfWbfu2LyTMcA5QZlE
-        ztGcxkEzT432nj9q8PIzOE/dLlBH9qmqNtIru5Px8rrXCiXwnOwPyw==
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdWZPeXFtVlFPTXFaNG1n
+        TVI0eUN5dlA1bjhiaGhGVTlHUUMrUDRYN2trCkNqSzlRdDNhSmhsYmowNGFIODg0
+        YnlqZXdNRHJkbWdRUFRjaXpIaWU4QmMKLS0tIDBvbHEvQ1NWR1hQT1VRVkdzYUw4
+        LzNrVHNlVndsZURUeEVWckY4WDZCSHcK7SNg2ZgXTjwt6clTiIVv1J2N/NUIpNxo
+        6TGl0e/iXAxfdD92ql3XGOoqWdawLuh/8XIfhTOCm119gvirQg0VgA==
        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-09-29T07:11:01Z"
-  mac: ENC[AES256_GCM,data:2g2SsDmfzij3reQmesIQnCafpOl70rlAHWc3oPHYSg4Eq2I8Q3R8q0wyOGV7TkUDU4Kp/ahgeoRBw+AxwxDWGg2B2J6gz3DRAEMc5gMVC2hu4kq4MbSKzyDkOGJj8BH0LTBLQOmORB7PUFh3QJriihkAHe2TI3Ij6iTRfpdTOfI=,iv:/CnBacVjIcHE2XiRt6w4r0yA92l9ilAViZxy7o3wIOE=,tag:8PIFiqz1mpODDMSO+POhFg==,type:str]
+  lastmodified: "2024-10-08T15:36:19Z"
+  mac: ENC[AES256_GCM,data:wJUlji1rYL4TQNJhTlnM8UyrvR1+TtJyMZQZMUgPhpE7Eq3buvmr3KR9JTscKkS0iT8pU69WMJLZLrSLGCkBAewjO7pUmz9JwwPbKhajj9Y3TSqgpo1eWafwjk+bUy+g79lV4De0cHT7rKT8ytjl3xe3sqEZugHpIX4HKJ7SUZU=,iv:1QSEoA2F1pt8NesmMNsfdrBCQYo1bksmcYZxCYpYlGo=,tag:oXfnL74WQ6GtfrKi+HmxmA==,type:str]
  pgp: []
  unencrypted_suffix: _unencrypted
-  version: 3.9.0
+  version: 3.9.1
--- a/values/badhouseplants/values.namespaces.yaml
+++ b/values/badhouseplants/values.namespaces.yaml
@ -6,3 +6,4 @@ namespaces:
  - name: platform
  - name: games
  - name: pipelines
+  - name: public-xray
--- a/values/badhouseplants/values.server-xray-public.yaml
+++ b/values/badhouseplants/values.server-xray-public.yaml
@ -0,0 +1,26 @@
+traefik:
+  enabled: true
+  tcpRoutes:
+    - name: server-xray-public
+      service: server-xray-public-xray-https
+      match: HostSNI(`xray-public.badhouseplants.net`)
+      entrypoint: xray-public
+      port: 443
+shortcuts:
+  hostname: xray-public.badhouseplants.net
+ingress:
+  main:
+    enabled: true
+    annotations:
+      cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
+      kubernetes.io/ingress.allow-http: "false"
+      kubernetes.io/ingress.class: traefik
+      kubernetes.io/ingress.global-static-ip-name: ""
+      kubernetes.io/tls-acme: "true"
+      meta.helm.sh/release-name: xray
+      meta.helm.sh/release-namespace: xray
+      traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+extraVolumes:
+  certs:
+    secret:
+      secretName: xray-public.badhouseplants.net
--- a/values/badhouseplants/values.traefik.yaml
+++ b/values/badhouseplants/values.traefik.yaml
@ -28,6 +28,12 @@ ports:
      default: true
    exposedPort: 1195
    protocol: TCP
+  xray-public:
+    port: 27015
+    expose:
+      default: true
+    exposedPort: 27015
+    protocol: TCP
    #  valve-server:
    #    port: 27015
    #    expose: