36 lines
1.3 KiB
YAML
36 lines
1.3 KiB
YAML
# Both real clusters (node1-3 "prod", dev-k8s-1-3 "dev") run Traefik, not
|
|
# nginx — confirmed via `kubectl get ingressclass` (class is literally named
|
|
# `traefik`). Unlike nginx's restrictive 1MB default, Traefik has no default
|
|
# request-body-size cap, so there's no equivalent needed for mail attachment
|
|
# uploads (the old nginx.ingress.kubernetes.io/proxy-body-size annotation
|
|
# this file used to carry is simply not applicable here).
|
|
#
|
|
# Host, TLS secretName, and cert-manager issuer are ALL overlay-specific now
|
|
# (dev-k8s only has a `letsencrypt-staging` issuer; node1-3/prod has none
|
|
# configured yet) — every overlay's patch-ingress.yaml must override the
|
|
# CHANGEME placeholders below.
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: vncmail-plus
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: CHANGEME
|
|
traefik.ingress.kubernetes.io/router.middlewares: traefik-redirect-to-https@kubernetescrd
|
|
spec:
|
|
ingressClassName: traefik
|
|
tls:
|
|
- hosts:
|
|
- CHANGEME.invalid
|
|
secretName: vncmail-plus-tls
|
|
rules:
|
|
- host: CHANGEME.invalid
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: vncmail-plus
|
|
port:
|
|
number: 80
|