62 lines
1.4 KiB
YAML
62 lines
1.4 KiB
YAML
certificate:
|
|
enabled: true
|
|
certificate:
|
|
- name: apfelkuchen.badhouseplants.net
|
|
secretName: apfelkuchen.badhouseplants.net
|
|
issuer:
|
|
kind: ClusterIssuer
|
|
name: badhouseplants-issuer-http01
|
|
dnsNames:
|
|
- apfelkuchen.badhouseplants.net
|
|
workload:
|
|
replicas: 2
|
|
containers:
|
|
server-xray:
|
|
ports:
|
|
shadowsocks-tcp: tcp
|
|
shadowsocks-udp: udp
|
|
|
|
traefik:
|
|
enabled: true
|
|
tcpRoutes:
|
|
- name: server-apfelkuchen
|
|
service: server-xray-public-edge-xray-https
|
|
match: HostSNI(`apfelkuchen.badhouseplants.net`)
|
|
entrypoint: websecure
|
|
port: 443
|
|
tls:
|
|
secretName: apfelkuchen.badhouseplants.net
|
|
passthrough: true
|
|
shortcuts:
|
|
hostname: apfelkuchen.badhouseplants.net
|
|
ingress:
|
|
main:
|
|
enabled: false
|
|
annotations:
|
|
kubernetes.io/ingress.allow-http: "false"
|
|
kubernetes.io/ingress.class: traefik
|
|
kubernetes.io/ingress.global-static-ip-name: ""
|
|
kubernetes.io/tls-acme: "true"
|
|
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
|
extraVolumes:
|
|
certs:
|
|
secret:
|
|
secretName: apfelkuchen.badhouseplants.net
|
|
service:
|
|
shadowsocks-tcp:
|
|
enabled: true
|
|
type: ClusterIP
|
|
ports:
|
|
tcp:
|
|
port: 8443
|
|
targetPort: 8443
|
|
protocol: TCP
|
|
shadowsocks-udp:
|
|
enabled: true
|
|
type: ClusterIP
|
|
ports:
|
|
udp:
|
|
port: 8443
|
|
targetPort: 8443
|
|
protocol: UDP
|