mirror of
https://github.com/allaunthefox/Research-Stack.git
synced 2026-08-11 03:50:35 +00:00
69b984c410
- Revert builder image in embedded_surface Dockerfile to rust:bookworm for glibc compatibility with bookworm-slim runner. - Replace racknerd-surface.json Git LFS pointer with the actual retrieved JSON config to resolve parse errors. - Separated and imported regenerated docker images for stubs and credential-server on all cluster nodes. - Fixed Ingress resources and middleware to target the correct authentik-server service name. - Rewrote verification script checks to handle iptables-based ports and relative redirects robustly. - Updated nixos-laptop IP in node topology documentation. Build: 0 jobs, 0 errors
120 lines
2.5 KiB
YAML
120 lines
2.5 KiB
YAML
# Traefik middlewares for the Research Stack Ingress
|
|
#
|
|
# forward-auth: Authentik SSO gate (applied to /apps/*, /server/*)
|
|
# strip-apps-chat: strip /apps/chat prefix before forwarding to Hermes
|
|
# strip-apps-budget: strip /apps/budget prefix
|
|
# strip-server-status: strip /server/status prefix
|
|
# strip-server-dash: strip /server/dash prefix
|
|
# strip-server-vault: strip /server/vault prefix
|
|
# strip-api-cred: strip /api/cred prefix
|
|
# strip-api-registry: strip /api/registry prefix
|
|
# strip-api-jobs: strip /api/jobs prefix
|
|
# strip-api-blobs: strip /api/blobs prefix
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: authentik-forward-auth
|
|
namespace: services
|
|
spec:
|
|
forwardAuth:
|
|
address: http://authentik-server.services.svc.cluster.local/outpost.goauthentik.io/auth/caddy
|
|
authResponseHeaders:
|
|
- X-Authentik-Username
|
|
- X-Authentik-Email
|
|
- X-Authentik-Name
|
|
- X-Authentik-Uid
|
|
- X-Authentik-Jwt
|
|
- X-Authentik-Meta-Jwt
|
|
- X-Authentik-Meta-App
|
|
- X-Authentik-Meta-Version
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: strip-apps-chat
|
|
namespace: services
|
|
spec:
|
|
stripPrefix:
|
|
prefixes:
|
|
- /apps/chat
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: strip-apps-budget
|
|
namespace: services
|
|
spec:
|
|
stripPrefix:
|
|
prefixes:
|
|
- /apps/budget
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: strip-server-status
|
|
namespace: services
|
|
spec:
|
|
stripPrefix:
|
|
prefixes:
|
|
- /server/status
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: strip-server-dash
|
|
namespace: services
|
|
spec:
|
|
stripPrefix:
|
|
prefixes:
|
|
- /server/dash
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: strip-server-vault
|
|
namespace: services
|
|
spec:
|
|
stripPrefix:
|
|
prefixes:
|
|
- /server/vault
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: strip-api-cred
|
|
namespace: services
|
|
spec:
|
|
stripPrefix:
|
|
prefixes:
|
|
- /api/cred
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: strip-api-registry
|
|
namespace: services
|
|
spec:
|
|
stripPrefix:
|
|
prefixes:
|
|
- /api/registry
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: strip-api-jobs
|
|
namespace: services
|
|
spec:
|
|
stripPrefix:
|
|
prefixes:
|
|
- /api/jobs
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: strip-api-blobs
|
|
namespace: services
|
|
spec:
|
|
stripPrefix:
|
|
prefixes:
|
|
- /api/blobs
|