copilot ingress

.github/workflows/apply-kubernetes.yml

@@ -32,4 +32,5 @@ jobs:
           kubectl apply -f kubernetes/ingress
           kubectl apply -f kubernetes/proxy-ingress
 
-          kubectl annotate ingressclass nginx ingressclass.kubernetes.io/is-default-class=true
+          kubectl annotate ingressclass nginx \
+            ingressclass.kubernetes.io/is-default-class="true" --overwrite

home-server/nginx.conf

@@ -55,18 +55,6 @@ server {
     }
 }
 
-server {
-    listen 443 ssl;
-    listen [::]:443 ssl;
-    server_name plex.alexmickelson.guru;
-
-    location / {
-        proxy_pass http://host.docker.internal:32400;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-    }
-}
-
 server {
     listen 443 ssl;
     listen [::]:443 ssl;

kubernetes/proxy-ingress/copilot-proxy-ingress.yml

@@ -0,0 +1,33 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: copilot-ingress
+  namespace: projects
+  annotations:
+    cert-manager.io/cluster-issuer: cloudflare-issuer
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts: 
+    - copilot.alexmickelson.guru
+    secretName: copilot-tls-cert
+  rules:
+  - host: copilot.alexmickelson.guru
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: copilot-service
+            port:
+              number: 4444
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: copilot-service
+  namespace: projects
+spec:
+  type: ExternalName
+  externalName: 100.122.128.107